VictoriaMetrics/Journald.md at a549240852078a7913138137dcc7f8b31cec680d

mirror of https://github.com/VictoriaMetrics/VictoriaMetrics.git synced 2024-11-23 20:37:12 +01:00

Andrii Chubatiuk 7e60afb6fc

app/vlinsert: adds journald ingestion support

This commit allows to ingest logs with journald format. 

https://www.freedesktop.org/software/systemd/man/latest/systemd-journal-remote.service.html

related issue: https://github.com/VictoriaMetrics/VictoriaMetrics/issues/4618

2024-10-27 20:36:33 +01:00

1.7 KiB

Raw Blame History

weight

title

disableToc

aliases

Journald setup

true

docs

parent	weight
victorialogs-data-ingestion	10

/VictoriaLogs/data-ingestion/Journald.html

On a client site which should already have journald please install additionally systemd-journal-upload and edit /etc/systemd/journal-upload.conf and set URL to VictoriaLogs endpoint:

[Upload]
URL=http://localhost:9428/insert/journald

Substitute the localhost:9428 address inside endpoints section with the real TCP address of VictoriaLogs.

Since neither HTTP query arguments nor HTTP headers are configurable on systemd-journal-upload, stream fields and other params can be configured on VictoriaLogs using command-line flags:

journald.streamFields - configures stream fields for ingested data. Here's a list of supported Journald fields
journald.ignoreFields - configures Journald fields, that should be ignored.
journald.tenantID - configures TenantID for ingested data.
journald.timeField - configures time field for ingested data.

1.7 KiB Raw Blame History

1.7 KiB

Raw Blame History