mirror of
https://github.com/VictoriaMetrics/VictoriaMetrics.git
synced 2024-12-01 14:47:38 +00:00
1f8dd125fc
Links with upper-case simply don't work for unknown reason. Once the reason is fixed on docs side, this commit can be reverted. Signed-off-by: hagen1778 <roman@victoriametrics.com> |
||
---|---|---|
.. | ||
docker-compose.yml | ||
filebeat.yml | ||
README.md |
Docker compose Filebeat integration with VictoriaLogs for syslog
The folder contains the example of integration of filebeat with Victorialogs
To spin-up environment run the following command:
docker compose up -d
To shut down the docker-compose environment run the following command:
docker compose down
docker compose rm -f
The docker compose file contains the following components:
- filebeat - fileabeat is configured to accept
syslog
logs inrfc3164
format on5140
port, you can find configuration in thefilebeat.yml
. It writes data in VictoriaLogs - VictoriaLogs - the log database, it accepts the data from
filebeat
by elastic protocol
Querying the data
- vmui - a web UI is accessible by
http://localhost:9428/select/vmui
- for querying the data via command-line please check these docs
the example of filebeat configuration(filebeat.yml
)
filebeat.inputs:
- type: syslog
format: rfc3164
protocol.tcp:
host: "0.0.0.0:5140"
output.elasticsearch:
hosts: [ "http://victorialogs:9428/insert/elasticsearch/" ]
worker: 5
bulk_max_size: 1000
parameters:
_msg_field: "message"
_time_field: "@timestamp"
_stream_fields: "host.name,process.program,process.pid,container.name"
Please, note that _stream_fields
parameter must follow recommended best practices to achieve better performance.