Skip to content

Instantly share code, notes, and snippets.

@PaulusTM
Forked from VerosK/rsyslog-fowarding-config
Last active August 29, 2015 14:15
Show Gist options
  • Save PaulusTM/8e707e63f45746b187b3 to your computer and use it in GitHub Desktop.
Save PaulusTM/8e707e63f45746b187b3 to your computer and use it in GitHub Desktop.
#[root /etc/rsyslog.d]# cat 12-nagios.conf
$ModLoad imfile
$InputFilename /var/log/nagios/nagios.log
$InputFileStateFile .nagios.rsyslog
$InputFileTag nagios.log
$InputFileFacility local6
$InputFileSeverity info
$InputRunFileMonitor
#[root /etc/rsyslog.d]# cat 99-forward-to-logstash.conf
#
# TCP Logging to local logstash with queue
#
$WorkDirectory /var/lib/rsyslog # where to place spool files
$ActionQueueFileName to-logstash # unique name prefix for spool files
$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
$ActionQueueType LinkedList # run asynchronously
$ActionResumeRetryCount -1 # infinite retries if host is down
*.* @@192.168.16.228:5544
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment