[syslog-ng] elasticsearch destination resource options bug?
Evan Rempel
erempel at uvic.ca
Tue Jun 7 18:13:58 CEST 2016
I have the elasticsearch destination working correctly, but if I try to use multiple rsources, I get an error
destination d_elasticsearch_0 {
elasticsearch(
index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
type("flare")
cluster("es-dcs-dev")
client_mode("node")
flush_limit("10000")
template("$MESSAGE ")
resource("/etc/elasticsearch/elasticsearch.yml")
);
};
works fine, but if I add a second resource
destination d_elasticsearch_0 {
elasticsearch(
index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
type("flare")
cluster("es-dcs-dev")
client_mode("node")
flush_limit("10000")
template("$MESSAGE ")
resource("/etc/elasticsearch/elasticsearch.yml;/etc/elasticsearch/logging.yml")
);
};
I get an error
Starting system logger (syslog-ng.esgateway): [2016-06-07T09:01:58.694633] org.syslog_ng.elasticsearch_v2.client.ESNodeClient.loadConfigFile:69 - Can't load settings from file, file = '/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml', reason = 'Failed to open stream for url [/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml]';
Can anyone shed some light on how to configure multiple resources?
--
Evan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160607/d424f3f8/attachment.htm
More information about the syslog-ng
mailing list