[
https://issues.apache.org/jira/browse/FLUME-1960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13795453#comment-13795453
]
Roshan Naik commented on FLUME-1960:
------------------------------------
[~jlord] the serializer for HDFS sink is independent of the Syslog. The title
of this jira is misleading IMO...as "syslog sink" does not exist.
> Flume syslog sink missing serializer documentation
> --------------------------------------------------
>
> Key: FLUME-1960
> URL: https://issues.apache.org/jira/browse/FLUME-1960
> Project: Flume
> Issue Type: Documentation
> Components: Docs
> Affects Versions: v1.3.1
> Reporter: Rob Johnson
> Priority: Minor
> Labels: noob
>
> A special serializer for HDFS Sink was added to Flume a while back, but it's
> not documented. This serializer is useful when the source is any type of
> syslog source.
> Without specifying the serializer, the timestamp and host are not logged to
> the file with the event information, which is pretty useless without the
> timestamp and hosts.
> The serializer can be configured on an hdfs sink like so:
> agent1.sinks.k1.serializer=HEADER_AND_TEXT
> Without this serializer specified you get (for example):
> adclient[12112]: INFO <bg:krb5.conf> daemon.main Start trusted domain
> discovery
> as an event.
> When you specify the serializer, the same event looks like this:
> {timestamp=1364380838000, Severity=6, host=myhostname, Facility=4}
> adclient[12112]: INFO <bg:krb5.conf> daemon.main Start trusted domain
> discovery
> Which is much more useful.
--
This message was sent by Atlassian JIRA
(v6.1#6144)
