[syslog-ng] elasticsearch destination resource options bug?

7 Jun 2016

      I have   the elasticsearch destination working correctly, but if I try to use multiple rsources, I get an error

destination d_elasticsearch_0 {
   elasticsearch(
     index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
     type("flare")
     cluster("es-dcs-dev")
     client_mode("node")
     flush_limit("10000")
     template("$MESSAGE                    ")
     resource("/etc/elasticsearch/elasticsearch.yml")
   );
};

works fine, but if I add a second resource

destination d_elasticsearch_0 {
   elasticsearch(
     index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
     type("flare")
     cluster("es-dcs-dev")
     client_mode("node")
     flush_limit("10000")
     template("$MESSAGE                    ")
resource("/etc/elasticsearch/elasticsearch.yml;/etc/elasticsearch/logging.yml")
   );
};

I get an error

Starting system logger (syslog-ng.esgateway): [2016-06-07T09:01:58.694633] org.syslog_ng.elasticsearch_v2.client.ESNodeClient.loadConfigFile:69 - Can't load settings from file, file = '/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml', reason = 'Failed to open stream for url [/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml]';

Can anyone shed some light on how to configure multiple resources?

-- 
Evan

[syslog-ng] elasticsearch destination resource options bug?

Evan Rempel