add nginx inputs to graylog
This commit is contained in:
parent
c2ec6804de
commit
26261d6379
4 changed files with 60 additions and 57 deletions
|
@ -1,10 +1,6 @@
|
|||
with builtins; {
|
||||
|
||||
imports = [
|
||||
./provider.nix
|
||||
#./nginx.nix
|
||||
./journald.nix
|
||||
];
|
||||
imports = [ ./provider.nix ./nginx.nix ./journald.nix ];
|
||||
|
||||
resource.graylog_output.stdout = {
|
||||
title = "test stdout";
|
||||
|
|
|
@ -1,7 +1,5 @@
|
|||
with builtins; {
|
||||
|
||||
#data.graylog_index_set.default.index_prefix = "graylog";
|
||||
|
||||
resource = {
|
||||
|
||||
graylog_input.journald = {
|
||||
|
@ -18,11 +16,9 @@ with builtins; {
|
|||
});
|
||||
};
|
||||
|
||||
# todo create stream
|
||||
graylog_stream.journald = {
|
||||
title = "journald";
|
||||
description = "journald processing stream";
|
||||
#index_set_id = "\${data.graylog_index_set.default.id}";
|
||||
index_set_id = "\${graylog_index_set.default.id}";
|
||||
disabled = false;
|
||||
matching_type = "AND";
|
||||
|
|
|
@ -1,55 +1,66 @@
|
|||
with builtins; {
|
||||
resource.graylog_input = {
|
||||
nginx_access_logs = {
|
||||
title = "test nginx access log input";
|
||||
# https://javadoc.io/doc/org.graylog2/graylog2-inputs/latest/index.html
|
||||
type = "org.graylog2.inputs.syslog.udp.SyslogUDPInput";
|
||||
global = true;
|
||||
attributes = toJSON ({
|
||||
allow_override_date = true;
|
||||
bind_address = "0.0.0.0";
|
||||
expand_structured_data = false;
|
||||
force_rdns = false;
|
||||
number_worker_threads = 2;
|
||||
port = 12209; # todo
|
||||
recv_buffer_size = 262144;
|
||||
store_full_message = false;
|
||||
});
|
||||
};
|
||||
nginx_error_logs = {
|
||||
title = "test nginx error log input";
|
||||
# https://javadoc.io/doc/org.graylog2/graylog2-inputs/latest/index.html
|
||||
type = "org.graylog2.inputs.syslog.udp.SyslogUDPInput";
|
||||
global = true;
|
||||
attributes = toJSON ({
|
||||
allow_override_date = true;
|
||||
bind_address = "0.0.0.0";
|
||||
expand_structured_data = false;
|
||||
force_rdns = false;
|
||||
number_worker_threads = 2;
|
||||
port = 12208; # todo
|
||||
recv_buffer_size = 262144;
|
||||
store_full_message = false;
|
||||
});
|
||||
};
|
||||
};
|
||||
|
||||
resource.graylog_input_static_fields = {
|
||||
nginx_access_logs = {
|
||||
input_id = "\${graylog_input.nginx_access_logs.id}";
|
||||
fields = {
|
||||
from_nginx = true;
|
||||
nginx_error = false;
|
||||
nginx_access = true;
|
||||
resource = {
|
||||
|
||||
graylog_input = {
|
||||
|
||||
nginx_access_logs = {
|
||||
title = "nginx access log";
|
||||
# https://javadoc.io/doc/org.graylog2/graylog2-inputs/latest/index.html
|
||||
type = "org.graylog2.inputs.syslog.udp.SyslogUDPInput";
|
||||
global = true;
|
||||
attributes = toJSON ({
|
||||
allow_override_date = true;
|
||||
bind_address = "0.0.0.0";
|
||||
expand_structured_data = false;
|
||||
force_rdns = false;
|
||||
number_worker_threads = 4;
|
||||
port = 12304;
|
||||
recv_buffer_size = 1048576;
|
||||
store_full_message = false;
|
||||
});
|
||||
};
|
||||
};
|
||||
nginx_error_logs = {
|
||||
input_id = "\${graylog_input.nginx_error_logs.id}";
|
||||
fields = {
|
||||
from_nginx = true;
|
||||
nginx_error = true;
|
||||
nginx_access = false;
|
||||
|
||||
nginx_error_logs = {
|
||||
title = "nginx error log";
|
||||
# https://javadoc.io/doc/org.graylog2/graylog2-inputs/latest/index.html
|
||||
type = "org.graylog2.inputs.syslog.udp.SyslogUDPInput";
|
||||
global = true;
|
||||
attributes = toJSON ({
|
||||
allow_override_date = true;
|
||||
bind_address = "0.0.0.0";
|
||||
expand_structured_data = false;
|
||||
force_rdns = false;
|
||||
number_worker_threads = 4;
|
||||
port = 12305;
|
||||
recv_buffer_size = 1048576;
|
||||
store_full_message = false;
|
||||
});
|
||||
};
|
||||
|
||||
};
|
||||
|
||||
graylog_input_static_fields = {
|
||||
|
||||
nginx_access_logs = {
|
||||
input_id = "\${graylog_input.nginx_access_logs.id}";
|
||||
fields = {
|
||||
from_nginx = true;
|
||||
nginx_error = false;
|
||||
nginx_access = true;
|
||||
};
|
||||
};
|
||||
|
||||
nginx_error_logs = {
|
||||
input_id = "\${graylog_input.nginx_error_logs.id}";
|
||||
fields = {
|
||||
from_nginx = true;
|
||||
nginx_error = true;
|
||||
nginx_access = false;
|
||||
};
|
||||
};
|
||||
|
||||
};
|
||||
|
||||
};
|
||||
}
|
||||
|
|
Binary file not shown.
Loading…
Reference in a new issue