[[inputs.syslog]] ## Protocol, address and port to host the syslog receiver. ## If no host is specified, then localhost is used. ## If no port is specified, 6514 is used (RFC5425#section-4.1). ## ex: server = "tcp://localhost:6514" ## server = "udp://:6514" ## server = "unix:///var/run/telegraf-syslog.sock" ## When using tcp, consider using 'tcp4' or 'tcp6' to force the usage of IPv4 ## or IPV6 respectively. There are cases, where when not specified, a system ## may force an IPv4 mapped IPv6 address. server = "tcp://127.0.0.1:6514" ## Permission for unix sockets (only available on unix sockets) ## This setting may not be respected by some platforms. To safely restrict ## permissions it is recommended to place the socket into a previously ## created directory with the desired permissions. ## ex: socket_mode = "777" # socket_mode = "" ## Maximum number of concurrent connections (only available on stream sockets like TCP) ## Zero means unlimited. # max_connections = 0 ## Read timeout (only available on stream sockets like TCP) ## Zero means unlimited. # read_timeout = "0s" ## Optional TLS configuration (only available on stream sockets like TCP) # tls_cert = "/etc/telegraf/cert.pem" # tls_key = "/etc/telegraf/key.pem" ## Enables client authentication if set. # tls_allowed_cacerts = ["/etc/telegraf/clientca.pem"] ## Maximum socket buffer size (in bytes when no unit specified) ## For stream sockets, once the buffer fills up, the sender will start ## backing up. For datagram sockets, once the buffer fills up, metrics will ## start dropping. Defaults to the OS default. # read_buffer_size = "64KiB" ## Period between keep alive probes (only applies to TCP sockets) ## Zero disables keep alive probes. Defaults to the OS configuration. # keep_alive_period = "5m" ## Content encoding for message payloads ## Can be set to "gzip" for compressed payloads or "identity" for no encoding. # content_encoding = "identity" ## Maximum size of decoded packet (in bytes when no unit specified) # max_decompression_size = "500MB" ## Framing technique used for messages transport ## Available settings are: ## octet-counting -- see RFC5425#section-4.3.1 and RFC6587#section-3.4.1 ## non-transparent -- see RFC6587#section-3.4.2 # framing = "octet-counting" ## The trailer to be expected in case of non-transparent framing (default = "LF"). ## Must be one of "LF", or "NUL". # trailer = "LF" ## Whether to parse in best effort mode or not (default = false). ## By default best effort parsing is off. # best_effort = false ## The RFC standard to use for message parsing ## By default RFC5424 is used. RFC3164 only supports UDP transport (no streaming support) ## Must be one of "RFC5424", or "RFC3164". # syslog_standard = "RFC5424" ## Character to prepend to SD-PARAMs (default = "_"). ## A syslog message can contain multiple parameters and multiple identifiers within structured data section. ## Eg., [id1 name1="val1" name2="val2"][id2 name1="val1" nameA="valA"] ## For each combination a field is created. ## Its name is created concatenating identifier, sdparam_separator, and parameter name. # sdparam_separator = "_"