destination d_es {
elasticsearch2(
disk-buffer(
reliable(no) # If set to no, the normal disk-buffer will be used. This provides a faster, option
dir("/opt/syslog-ng/buffer")
disk-buf-size(10485760)
mem-buf-length(100000) # number of messages stored in overflow queue
)
client-mode("http")
index("syslog-ng_${YEAR}.${MONTH}.${DAY}")
type("syslog") # Description: The type of the index. For example, type("test")
template("$(format-json --scope rfc3164 --scope nv-pairs --exclude R_DATE --key ISODATE)\n")
concurrent-requests("5") # Number of concurrrent batches
flush_limit("5000") # The number of messages in a single batch
skip-cluster-health-check("yes")
cluster("hal")
client_lib_dir("/usr/share/elasticsearch/lib")
);
};