Skip to content
Snippets Groups Projects

Draft: Enable Loki as a replacement for Elasticsearch when `enable_loki` is set.

Closed ale requested to merge loki into master
1 file
+ 2
13
Compare changes
  • Side-by-side
  • Inline
@@ -58,7 +58,7 @@ template(name="lokiTemplate"
@@ -58,7 +58,7 @@ template(name="lokiTemplate"
constant(value="000000000")
constant(value="000000000")
constant(value="\",\"") property(name="msg" format="json")
constant(value="\",\"") property(name="msg" format="json")
constant(value="\"]]}")
constant(value="\"]]}")
}
}
template(name="lokiTemplateHTTP"
template(name="lokiTemplateHTTP"
type="list" ) {
type="list" ) {
constant(value="{")
constant(value="{")
@@ -71,7 +71,7 @@ template(name="lokiTemplateHTTP"
@@ -71,7 +71,7 @@ template(name="lokiTemplateHTTP"
constant(value="000000000")
constant(value="000000000")
constant(value="\",\"") property(name="$!all-json" position.from="2" format="jsonf")
constant(value="\",\"") property(name="$!all-json" position.from="2" format="jsonf")
constant(value="\"]]}")
constant(value="\"]]}")
}
}
template(name="lokiTemplateJSON"
template(name="lokiTemplateJSON"
type="list" ) {
type="list" ) {
constant(value="{")
constant(value="{")
@@ -85,7 +85,6 @@ template(name="lokiTemplateJSON"
@@ -85,7 +85,6 @@ template(name="lokiTemplateJSON"
property(outname="@timestamp" name="timereported" dateFormat="unixtimestamp" format="jsonf")
property(outname="@timestamp" name="timereported" dateFormat="unixtimestamp" format="jsonf")
constant(value="\",\"") property(name="$!all-json" position.from="2" format="jsonf")
constant(value="\",\"") property(name="$!all-json" position.from="2" format="jsonf")
constant(value="\"]]}")
constant(value="\"]]}")
}
}
}
# Structured audit logs already contain a @timestamp field, so we
# Structured audit logs already contain a @timestamp field, so we
# don't have to add our own.
# don't have to add our own.
@@ -116,16 +115,6 @@ template(name="outfmt" type="list" option.jsonf="on") {
@@ -116,16 +115,6 @@ template(name="outfmt" type="list" option.jsonf="on") {
name="app-name" format="jsonf")
name="app-name" format="jsonf")
property(outname="message"
property(outname="message"
name="msg" format="jsonf")
name="msg" format="jsonf")
}
{
"@timestamp": "2018-03-01T01:00:00+00:00",
"host": "172.20.245.8",
"severity": "DEBUG",
"facility": "local4",
"syslog-tag": "app[1666]",
"source": "app",
"message": " this is my syslog message"
}
}
{% if enable_elasticsearch %}
{% if enable_elasticsearch %}
Loading