Edge Delta Graylog Output
3 minute read
Overview
The Graylog output will stream analytics and insights to your Graylog endpoint.
Example
- name: graylog
type: graylog
host: "localhost"
port: 5555
features: metric,log,health,alert,event
custom_tags:
"ConfigID": "{{.ConfigID}}"
"Host": "{{.Host}}"
"Source": "{{.Source}}"
"SourceType": "{{.SourceType}}"
"Tag": "{{.Tag}}"
Parameters
name
Required
The name
parameter specifies a name for the data destination. You refer to this name in other places, for example to refer to a specific destination in a workflow. Names must be unique within the outputs section. It is a yaml list element so it begins with a - and a space followed by the string. A name
is required for a data destinations.
outputs:
streams:
- name: <data destination name>
type: graylog
Required
The type
parameter specifies a vendor or technology for the streaming data destination. It is a closed list element that requires one of the options. See the supported types here{target="_blank"}. A type
is required for a streaming data destination.
outputs:
streams:
- name: <data destination name>
type: <destination type>
integration_name
Optional
This parameter refers to the organization-level integration created in the Integrations page.
If you need to add multiple instances of the same integration into the config, then you can add a custom name to each instance via the name parameter. In this situation, the name should be used to refer to the specific instance of the destination in the workflows.
host
Optional
Enter the graylog host.
port
Optional
Enter the graylog port.
custom_tags
Optional
This parameter defines key-value pairs that are streamed with every request.
custom_tags:
"ConfigID": "{{.ConfigID}}"
"Host": "{{.Host}}"
"Source": "{{.Source}}"
"SourceType": "{{.SourceType}}"
"Tag": "{{.Tag}}"
features
Optional
This parameter defines which data types to stream to the destination.
To learn more, see the following section on supported feature types.
buffer_ttl
Optional
Enter a length of time to retry failed streaming data.
After this length of time is reached, the failed streaming data will no longer be tried.
buffer_path
Optional
Enter a folder path to temporarily store failed streaming data.
The failed streaming data will be retried until the data reaches its destinations or until the Buffer TTL value is reached.
If you enter a path that does not exist, then the agent will create directories, as needed.
buffer_max_bytesize
Optional
Enter the maximum size of failed streaming data that you want to retry.
If the failed streaming data is larger than this size, then the failed streaming data will not be retried.
Supported Features
See Streaming Features.
Feature Type | Supported? |
---|---|
Log | Yes |
Metrics | Yes |
Alert as event | No |
Alert as log | No |
Health | No |
Dimensions as attribute | No |
Send as is | No |
Send as JSON | No |
Custom tags | Yes |
EDAC enrichment | No |
Message template | No |
outgoing_bytes.sum | Yes |
outgoing__raw_bytes.sum | No |
outgoing_lines.count | No |
output buffering to disk | Yes |