40 lines
1.7 KiB
Text
40 lines
1.7 KiB
Text
|
[[inputs.syslog]]
|
||
|
|
## Protocol, address and port to host the syslog receiver.
|
||
|
|
## If no host is specified, then localhost is used.
|
||
|
|
## If no port is specified, 6514 is used (RFC5425#section-4.1).
|
||
|
|
## ex: server = "tcp://localhost:6514"
|
||
|
|
## server = "udp://:6514"
|
||
|
|
## server = "unix:///var/run/telegraf-syslog.sock"
|
||
|
|
## When using tcp, consider using 'tcp4' or 'tcp6' to force the usage of IPv4
|
||
|
|
## or IPV6 respectively. There are cases, where when not specified, a system
|
||
|
|
## may force an IPv4 mapped IPv6 address.
|
||
|
|
server = "tcp://127.0.0.1:6514"
|
||
|
|
|
||
|
|
{{template "/plugins/common/socket/socket.conf"}}
|
||
|
|
|
||
|
|
## Framing technique used for messages transport
|
||
|
|
## Available settings are:
|
||
|
|
## octet-counting -- see RFC5425#section-4.3.1 and RFC6587#section-3.4.1
|
||
|
|
## non-transparent -- see RFC6587#section-3.4.2
|
||
|
|
# framing = "octet-counting"
|
||
|
|
|
||
|
|
## The trailer to be expected in case of non-transparent framing (default = "LF").
|
||
|
|
## Must be one of "LF", or "NUL".
|
||
|
|
# trailer = "LF"
|
||
|
|
|
||
|
|
## Whether to parse in best effort mode or not (default = false).
|
||
|
|
## By default best effort parsing is off.
|
||
|
|
# best_effort = false
|
||
|
|
|
||
|
|
## The RFC standard to use for message parsing
|
||
|
|
## By default RFC5424 is used. RFC3164 only supports UDP transport (no streaming support)
|
||
|
|
## Must be one of "RFC5424", or "RFC3164".
|
||
|
|
# syslog_standard = "RFC5424"
|
||
|
|
|
||
|
|
## Character to prepend to SD-PARAMs (default = "_").
|
||
|
|
## A syslog message can contain multiple parameters and multiple identifiers within structured data section.
|
||
|
|
## Eg., [id1 name1="val1" name2="val2"][id2 name1="val1" nameA="valA"]
|
||
|
|
## For each combination a field is created.
|
||
|
|
## Its name is created concatenating identifier, sdparam_separator, and parameter name.
|
||
|
|
# sdparam_separator = "_"
|