Hi,
omelasticseearch has options like:
queue.type="linkedlist"
queue.size="5000"
queue.dequeuebatchsize="300"
action.resumeretrycount="-1")
What happens when the volume of logs is very low. For example, imagine a
log file where a new log event shows up only once a minute.
Looking at
http://www.rsyslog.com/doc/v8-stable/configuration/modules/omelasticsearch.html
I don't see a mention of "timeout" or "send every N seconds even if the
specified bulk size has not been reached yet".
Is there an option for that?
Thanks,
Otis
--
Monitoring - Log Management - Alerting - Anomaly Detection
Solr & Elasticsearch Consulting Support Training - http://sematext.com/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
