sorry,here is config:
__________________________________________________
module(load="omkafka")
module(load="omelasticsearch")
template(name="testTemplate"
type="list"
option.json="on") {
constant(value="{")
constant(value="\"timestamp\":\"") property(name="timereported"
dateFormat="rfc3339")
constant(value="\",\"message\":\"") property(name="msg")
constant(value="\",\"host\":\"") property(name="hostname")
constant(value="\",\"severity\":\"")
property(name="syslogseverity-text")
constant(value="\",\"facility\":\"")
property(name="syslogfacility-text")
constant(value="\",\"syslogtag\":\"") property(name="syslogtag")
constant(value="\"}")
}
local1.info action(type="omelasticsearch" server="manager.server:9200"
searchIndex="test-index" searchType="test-type")
___________________________________________________________
And, there is no error log。
I tried "rsyslogd -n" startup, but there was no extra information output, no
error was reported, and elasticsearch did not receive the messages. This
confuses me.
Also, I used it to forward the message to kafka's message successfully.
Any suggestions
thanks
At 2020-03-27 01:04:38, "John Chivian via rsyslog" <[email protected]>
wrote:
>No one can help you unless you provide detail. Start with your exact
>rsyslog configuration, and any examples of error messages.
>
>Regards,
>
>
>On 3/26/20 5:34 AM, 来自小七and雨 via rsyslog wrote:
>> Hi everyone,
>> I tried using rsyslog to send log messages to es, but failed.
>> I checked that the IP and port of es are correct, and I have also confirmed
>> that the es plugins is installed.
>> Checking that No corresponding index/type was created in es..
>> Can anyone help me? Thank you!
>> ______________________________________
>> env :
>> elasticsearch v7.3
>> rsyslog v8.24
>> centos v7.4
>> _______________________________________________
>> rsyslog mailing list
>> https://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
>> LIKE THAT.
>
>
>_______________________________________________
>rsyslog mailing list
>https://lists.adiscon.net/mailman/listinfo/rsyslog
>http://www.rsyslog.com/professional-services/
>What's up with rsyslog? Follow https://twitter.com/rgerhards
>NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
>sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
>THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
