Syslog-NG-Kakfa

735 词

Syslog-NG-Kakfa

destination d_kafka {

channel {

rewrite {

set("${HOST}" value(".eventv1.host"));

set("1" value(".eventv1.@version"));

set("${ISODATE}" value(".eventv1.@timestamp") condition("${.eventv1.@timestamp}" eq ""));

set("${MESSAGE}" value(".eventv1.message") condition("${.eventv1.message}" eq ""));

set("${MSG}" value(".eventv1.message") condition("${.eventv1.message}" eq ""));

set("generic" value(".eventv1.type") condition("${.eventv1.type}" eq ""));

};

destination {

kafka-c(config(metadata.broker.list("localhost:9092")

queue.buffering.max.ms("1000"))

topic("test")

message("$(format-json --key .eventv1.* --rekey .eventv1.* --shift 9)"));

};

};

};