[syslog-ng] Elasticscearh-http dest wish list

Fabien Wernli wernli at in2p3.fr
Tue Sep 3 06:53:31 UTC 2019


On Mon, Sep 02, 2019 at 03:06:55PM +0000, Attila Szakacs (aszakacs) wrote:
> We could give the user an option, to set multiple field mapping types when configuring the elasticsearch-http() destination, and if it is set, syslog-ng will try to create the index with the given mapping types before sending the logs. Although, it does not fit really well with the current implementation of elasticsearch-http(), it might be possible, that we can make it work.

ideally, syslog-ng should automatically generate the ES-mapping using
type-hints and/or the json types as set in format-json.



More information about the syslog-ng mailing list