[syslog-ng] a question about the elasticsearch-http driver

Fabien Wernli wernli at in2p3.fr
Fri Mar 11 21:11:03 UTC 2022


Hi Risto,

Although I didn't test this myself, I see two ways you could achieve this.

1. By using the "pipeline" query parameter in the url
   e.g. url("https://localhost:9200/_bulk?pipeline=mypipeline")
2. By setting a default pipeline in the ES index

I'm not sure however if elasticsearch-http()'s url parameter is
templateable. Yoy'll have to check for yourself.



More information about the syslog-ng mailing list