elk_stack/log_project/vector.yaml
2025-09-14 20:02:12 +03:30

43 lines
710 B
YAML

api:
enabled: false
address: 0.0.0.0:8686
sources:
my_source_id:
type: file
include:
- /var/log/*.log
- /var/log/*.log.1
read_from: end
transforms:
only_message:
type: remap
inputs:
- my_source_id
source: |
. = parse_json!(.message)
sinks:
# debug_console:
# type: console
# inputs:
# - my_source_id
# encoding:
# codec: json
my_sink_id:
type: elasticsearch
inputs:
- only_message
endpoints:
- ${ELASTIC_HOSTS}
auth:
password: ${ELASTIC_PASSWORD}
user: ${ELASTIC_USER}
strategy: "basic"
bulk:
index: "application-%Y-%m-%d"
tls:
ca_file: "/certs/ca/ca.crt"