Dear list, We’ve configured rsyslog to log to kafka on our Debian jessie and stretch systems, though we’re getting a lot of level 3 (error) Disconnect messages:
omkafka: kafka message <hereisanip>:9092/11: Receive failed: Disconnected [v8.24.0 try http://www.rsyslog.com/e/2422 omkafka: kafka message <hereisanip>:9092/10: Receive failed: Disconnected [v8.24.0 try http://www.rsyslog.com/e/2422 omkafka: kafka message kafka.local.<hereisadomainname>:9092/bootstrap: Receive failed: Connection reset by peer [v8.23.0 try http://www.rsyslog.com/e/2422 ] Everything comes from the rsyslog repos (packages) > rsyslog rsyslog-kafka The kafka config: module(load="omkafka") template(name="json_lines" type="string" string="{\"@timestamp\":\"%TIMESTAMP:::date-rfc3339%\",\"hostname\":\"%HOSTNAME%\",\"programname\":\"%programname%\",\"syslogfacility-text\":\"%syslogfacility-text%\",\"syslogseverity-text\":\"%syslogseverity-text%\",\"syslogseverity\":%syslogseverity%,\"syslogfacility\":%syslogfacility%,\"app-name\":\"%app-name%\",\"message\":\"%msg:::json%\",\"Region\":\"eu-west-1\",\"Environment\":\"alphasearch\",\"AvZone\":\"NA\",\"Service\":\"raas\",\"Subgroup\":\"activity\",\"Colour\":\"NA\"}" ) *.warn,*.err,*.crit,*.alert,*.emerg action( broker=["kafka.local. <hereisadomainname>:9092"] type="omkafka" topic="syslog_messages" template="json_lines" ) I am very grateful if you could help us out! Nino _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
