[syslog-ng] Difficulty with Elasticsearch Destination
Peter Kokai (pkokai)
Peter.Kokai at oneidentity.com
Sun Jun 16 06:44:14 UTC 2019
Please check which version of the documentation you use, most likely you obtained the latest instead of 3.8.1 (your version).
The elasticsearch-http was introduced in the https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.21.1 see the release notes.
Get Outlook for Android<https://aka.ms/ghei36>
From: syslog-ng <syslog-ng-bounces at lists.balabit.hu> on behalf of Kelly Marchewa <kelly_marchewa at yahoo.com>
Sent: Sunday, June 16, 2019 3:19:05 AM
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] Difficulty with Elasticsearch Destination
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
I recently installed syslog-ng on my Debian 9 system. I have tested syslog-ng with a file destination and everything seemed fine. Now, I am attempting?? to set the destination to my local Elasticsearch instance. However, I am receiving the following error:
Error parsing destination, destination plugin elasticsearch-http not found in /etc/syslog-ng/syslog-ng.conf at line 44, column 1:
My configuration, based on the documentation:
Output of syslog-ng --version:
I saw no indication in the documentation that any special modules/plugins needed to be loaded to use Elasticsearch as the destination. Any pointers as to what the issue is would be appreciated.??
kelly_marchewa at yahoo.com<mailto:kelly_marchewa at yahoo.com>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the syslog-ng