[syslog-ng] Fields don't appear on kibana.

Fabien Wernli wernli at in2p3.fr
Wed Sep 2 09:00:00 CEST 2015


Hi Balázs,

On Wed, Sep 02, 2015 at 07:16:32AM +0200, Scheidler, Balázs wrote:
> The best solution to send dara over the wire between two Syslog-ng
> instances (e.g. the one getting the logs and the other storing them in
> elastic) is to use json to encode name-value pairs.

That's another way, indeed. What these have in common, though, is that there
is no way to transmit TAGS from one syslog-ng instance to another properly
(then use tags() filters on the remote end)



More information about the syslog-ng mailing list