19 Aug
2014
19 Aug
'14
7:29 a.m.
Jim Hendrick <jrhendri@roadrunner.com> writes:
- I have done very basic testing with syslog-ng --> redis which I am planning on then --> elasticsearch (I may need to stick Logstash in between redis and elasticsearch)
FWIW, with the syslog-ng Incubator[1], you have multiple options to log directly to ElasticSearch. We even have an elasticsearch() destination there. (At the moment, it uses a very dumb python program, but in the future, it will be vastly improved. The syntax will remain the same, though). [1]: https://github.com/balabit/syslog-ng-incubator -- |8]