2013/5/30 Rainer Gerhards <[email protected]> > On Thu, May 30, 2013 at 1:07 AM, Gary Foster <[email protected] > >wrote: > > > Well, you have to do one or the other… either adjust your rsyslog output > > template to match the template kibana uses on your output or tweak kibana > > to expect the template you do use. I think the first option is the most > > sensible. > > > > As for logstash, yeah if you don't have to do a lot of parsing going > > straight from rsyslog to elastic search is probably a better solution. I > > don't (currently) have that option but I'm working towards it. > > > Let me hijack that thread to ask what's actually missing. Please pardon me > if we came across it and my memory fade away... ;) > > The reason I ask is that I think it would be good if we could get up some > guide on using Kibana with rsyslog (and patches to rsyslog if needed and > doable). > > I just wrote an end-to-end tutorial on setting up rsyslog, Elasticsearch and Kibana: http://blog.sematext.com/2013/07/01/recipe-rsyslog-elasticsearch-kibana/
When I saw this thread, I hoped I could do it ASAP, but it's better late than never :D Any questions, feedback, comments, tweets, handshakes, etc are welcome :) _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

