Hi David, We ran logstash-forwarder in a separate container, and shared volumes between app containers and a forwarding container. That's problematic as we move toward a clustered environment, because it means running multiple instances of logstash forwarder, or doing something peculiar with user permissions. Instead we'd like to delegate the log routing and filtering to the host OS via Docker's log driver.
On 4 February 2016 at 11:40, David Lang <[email protected]> wrote: > On Thu, 4 Feb 2016, Bob Gregory wrote: > > can you syslog over the network to localhost? rsyslog can be pretty >>> >> lightweight if you set queue sizes smaller than the default 500K messages. >> If you were running logstash-forwarder, rsyslog should be lighter. >> >> That's an interesting idea, but it would mean running a syslog daemon in >> each container. Generally, we stick to a single foreground process per >> container, so there's no init system for managing daemonised services, but >> that might change in the future. >> > > how were you running the logstash forwarder then? > > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > -- ---- *Bob Gregory* Application Architect MADE.COM <http://www.made.com/> Skype: flinkywistypomm [image: MADE] Made.com Design Limited is a company registered in England and Wales. Registered number: 07101408 | Registered office: 100 Charing Cross Road, London WC2H 0HG _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

