<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body><div>Yeah, probably separate source / dest and maybe parsed for better formatting.</div><div>Send it in json perhaps.</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><div style="font-size:85%;color:#575757" dir="auto">Sent from my Verizon, Samsung Galaxy smartphone</div></div><div><br></div><div style="font-size:100%;color:#000000"><!-- originalMessage --><div>-------- Original message --------</div><div>From: Scot <scotrn@gmail.com> </div><div>Date: 10/16/17 6:24 PM (GMT-05:00) </div><div>To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> </div><div>Subject: Re: [syslog-ng] [syslog </div><div><br></div></div><div dir="ltr">Yep but how do you get that to a d_es destination without adding an external tool ? <div>My understanding of the purpose is that stats may stop getting updated if the pipeline fails so It needs to be a separate "thread" but seems like that would be handled in separate src and destination definitions ? </div><div><br></div><div>i.e. Keep your stats/monitoring separate from the data stream. </div><div><br></div><div> </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 16, 2017 at 11:43 AM, james.r.hendrick <span dir="ltr"><<a href="mailto:james.r.hendrick@gmail.com" target="_blank">james.r.hendrick@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Do you mean the internal stats facility?</div><div>I would look into the elasticsearch native destination if you are not already.</div><div><br></div><div>Jim</div><div><br></div><div><br></div><div><br></div><div id="m_6037631918593506422composer_signature"><div style="font-size:85%;color:#575757" dir="auto">Sent from my Verizon, Samsung Galaxy smartphone</div></div><div><br></div><div style="font-size:100%;color:#000000"><div>-------- Original message --------</div><div>From: Evan Rempel <<a href="mailto:erempel@uvic.ca" target="_blank">erempel@uvic.ca</a>> </div><div>Date: 10/16/17 11:01 AM (GMT-05:00) </div><div>To: <a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a> </div><div>Subject: Re: [syslog </div><div><br></div></div>I have a perl script that collects some stats and logs them to syslog again. The syslog stream gets sent to ES, so they end up there, but as a syslog line, not a specific statistic item for things like grafana.<br><br>On 10/15/2017 05:57 PM, Scot wrote:<br>> Hi,<br>><br>> Looked around for a few hours and didn't see anything.<br>><br>> Has anyone worked on sending syslog-ng stats to ES ?<br>> I see several ways I could but wondering if anyone has already. A push method directly from syslog-ng would be awesome.<br>><br>> Scot<br>><br><br>______________________________<wbr>______________________________<wbr>__________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br><br></div><br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>
</body></html>