Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
@version: 3.0
source s_system {
internal();
unix-stream("/dev/log");
file("/proc/kmsg" program_override("kernel: "));
file("/var/log/daemon.log" follow_freq(1) flags(no-parse));
file("/var/log/dpkg.log" follow_freq(1) flags(no-parse));
};
source s_mongo {
file("/home/mainuser/data/logs/mongodb.log" follow_freq(1) flags(no-parse));
};
source s_mongo_secondary {
file("/home/mainuser/data/logs/mongodb-secondary.log" follow_freq(1) flags(no-parse));
};
source s_mongo_arbiter {
file("/home/mainuser/data/logs/mongodb-arbiter.log" follow_freq(1) flags(no-parse));
};
source s_ufw {
file("/var/log/ufw.log" follow_freq(1) flags(no-parse));
};
source s_kern {
file("/var/log/kern.log" follow_freq(1) flags(no-parse));
file("/var/log/udev" follow_freq(1) flags(no-parse));
};
source s_auth {
file("/var/log/auth.log" follow_freq(1) flags(no-parse));
};
source s_boot {
file("/var/log/dmesg" follow_freq(1) flags(no-parse));
file("/var/log/boot" follow_freq(1) flags(no-parse));
};
source s_messages {
file("/var/log/messages" follow_freq(1) flags(no-parse));
};
source s_webapp_master {
file("/home/mainuser/data/logs/webapp.log" follow_freq(1) flags(no-parse));
file("/home/mainuser/data/logs/webapp.err.log" follow_freq(1) flags(no-parse));
};
source s_webapp_worker1 {
file("/home/mainuser/data/logs/webapp_worker#1.log" follow_freq(1) flags(no-parse));
file("/home/mainuser/data/logs/webapp_worker#1.err.log" follow_freq(1) flags(no-parse));
};
source s_webapp_worker2 {
file("/home/mainuser/data/logs/webapp_worker#2.log" follow_freq(1) flags(no-parse));
file("/home/mainuser/data/logs/webapp_worker#2.err.log" follow_freq(1) flags(no-parse));
};
source s_webapp_worker3 {
file("/home/mainuser/data/logs/webapp_worker#3.log" follow_freq(1) flags(no-parse));
file("/home/mainuser/data/logs/webapp_worker#3.err.log" follow_freq(1) flags(no-parse));
};
source s_webapp_worker4 {
file("/home/mainuser/data/logs/webapp_worker#4.log" follow_freq(1) flags(no-parse));
file("/home/mainuser/data/logs/webapp_worker#4.err.log" follow_freq(1) flags(no-parse));
};
destination d_loggly_system {
tcp("logs.loggly.com" port(41xxx));
};
destination d_loggly_mongo {
tcp("logs.loggly.com" port(45xxx));
};
destination d_loggly_mongo_secondary {
tcp("logs.loggly.com" port(4xxxx));
};
destination d_loggly_mongo_arbiter {
tcp("logs.loggly.com" port(31xxx));
};
destination d_loggly_ufw {
tcp("logs.loggly.com" port(49xxx));
};
destination d_loggly_auth {
tcp("logs.loggly.com" port(49xxx));
};
destination d_loggly_boot {
tcp("logs.loggly.com" port(48xxx));
};
destination d_loggly_messages {
tcp("logs.loggly.com" port(31xxx));
};
destination d_loggly_kern {
tcp("logs.loggly.com" port(22xxx));
};
destination d_webapp_master {
tcp("logs.loggly.com" port(48xxx));
};
destination d_webapp_worker1 {
tcp("logs.loggly.com" port(25xxx));
};
destination d_webapp_worker2 {
tcp("logs.loggly.com" port(10xxx));
};
destination d_webapp_worker3 {
tcp("logs.loggly.com" port(24xxx));
};
destination d_webapp_worker4 {
tcp("logs.loggly.com" port(24xxx));
};
log {
source(s_system);
destination(d_loggly_system);
};
log {
source(s_mongo);
destination(d_loggly_mongo);
};
log {
source(s_mongo_secondary);
destination(d_loggly_mongo_secondary);
};
log {
source(s_mongo_arbiter);
destination(d_loggly_mongo_arbiter);
};
log {
source(s_ufw);
destination(d_loggly_ufw);
};
log {
source(s_auth);
destination(d_loggly_auth);
};
log {
source(s_boot);
destination(d_loggly_boot);
};
log {
source(s_messages);
destination(d_loggly_messages);
};
log {
source(s_kern);
destination(d_loggly_kern);
};
log {
source(s_webapp_master);
destination(d_webapp_master);
};
log {
source(s_webapp_worker1);
destination(d_webapp_worker1);
};
log {
source(s_webapp_worker2);
destination(d_webapp_worker2);
};
log {
source(s_webapp_worker3);
destination(d_webapp_worker3);
};
log {
source(s_webapp_worker4);
destination(d_webapp_worker4);
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment