[syslog-ng] elasticsearch destination resource options bug?

Evan Rempel erempel at uvic.ca
Tue Jun 7 18:13:58 CEST 2016


I have   the elasticsearch destination working correctly, but if I try to use multiple rsources, I get an error


destination d_elasticsearch_0 {
   elasticsearch(
     index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
     type("flare")
     cluster("es-dcs-dev")
     client_mode("node")
     flush_limit("10000")
     template("$MESSAGE                    ")
     resource("/etc/elasticsearch/elasticsearch.yml")
   );
};


works fine, but if I add a second resource

destination d_elasticsearch_0 {
   elasticsearch(
     index("flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")
     type("flare")
     cluster("es-dcs-dev")
     client_mode("node")
     flush_limit("10000")
     template("$MESSAGE                    ")
resource("/etc/elasticsearch/elasticsearch.yml;/etc/elasticsearch/logging.yml")
   );
};

I get an error

Starting system logger (syslog-ng.esgateway): [2016-06-07T09:01:58.694633] org.syslog_ng.elasticsearch_v2.client.ESNodeClient.loadConfigFile:69 - Can't load settings from file, file = '/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml', reason = 'Failed to open stream for url [/etc/elasticsearch/elasticsearch.yml /etc/elasticsearch/logging.yml]';


Can anyone shed some light on how to configure multiple resources?

-- 
Evan

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160607/d424f3f8/attachment.htm 


More information about the syslog-ng mailing list