Enable Splunk log fowarding
This commit is contained in:
parent
71c79dc48b
commit
02046fdc0c
1 changed files with 16 additions and 16 deletions
|
@ -164,22 +164,22 @@ kern.* ?r_kern;TraditionalFormat
|
||||||
#*.* @@splunk-syslog.corp.redhat.com:6514
|
#*.* @@splunk-syslog.corp.redhat.com:6514
|
||||||
#*.* @@10.31.20.29:6514
|
#*.* @@10.31.20.29:6514
|
||||||
|
|
||||||
# $DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
|
$DefaultNetstreamDriverCAFile /etc/pki/tls/certs/2022-IT-Root-CA.pem
|
||||||
# *.* action(
|
*.* action(
|
||||||
# type="omfwd"
|
type="omfwd"
|
||||||
# target="10.31.20.29"
|
target="10.31.20.29"
|
||||||
# port="6514"
|
port="6514"
|
||||||
# protocol="tcp"
|
protocol="tcp"
|
||||||
# queue.filename="fwdRule1" # unique name prefix for spool files
|
queue.filename="fwdRule1" # unique name prefix for spool files
|
||||||
# queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
|
queue.maxdiskspace="1g" # 1gb space limit (use as much as possible)
|
||||||
# queue.saveonshutdown="on" # save messages to disk on shutdown
|
queue.saveonshutdown="on" # save messages to disk on shutdown
|
||||||
# queue.type="LinkedList" # run asynchronously
|
queue.type="LinkedList" # run asynchronously
|
||||||
# queue.size="100000"
|
queue.size="100000"
|
||||||
# action.resumeRetryCount="10" # 10 retries if host is down
|
action.resumeRetryCount="10" # 10 retries if host is down
|
||||||
# StreamDriver="gtls"
|
StreamDriver="gtls"
|
||||||
# StreamDriverMode="1"
|
StreamDriverMode="1"
|
||||||
# StreamDriverAuthMode="anon" # not authenticated
|
StreamDriverAuthMode="anon" # not authenticated
|
||||||
# )
|
)
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue