Hello,
(Probably an email mostly for Rainer ?)
I proposed a patch which adds a controlable _id support when sending
logs in bulk mode in elasticsearch.
We needed to use UUIDs for each line of log and to send them in bulk
mode for more efficiency.
So here is how it can be configured for omelasticsearch :
$template LogID, "%uuid%"
*.* action(type="omelasticsearch"
[...]
bulkmode="on"
dynid="on"
idTpl="LogID"
[...]
)
The patch can be reviewed here : http://bugzilla.adiscon.com/show_bug.cgi?id=392
Any feedback welcome.
Have a nice day :)
--
Jérôme
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
