fluent-plugin-remote_tls_syslog

Fluentd plugin for output to remote syslog serivce over ssl protect your data from others in transferring with SSL

with certificate signed and registered correctly/publicly
with private CA certificates generated by users
with automatically generated and self-signed certificates in vulnerable way

authenticate by shared_key check from both of client(out_secure_forward) and server(in_secure_forward)

Requirements

fluent-plugin-remote_tls_syslog	fluentd	ruby
>= 1.0.0	>= v0.14.0 or >= v1.0.0	>= 2.1

Installation

 fluent-gem install fluent-plugin-remote_tls_syslog

Usage

<match foo.bar>
  @type remote_tls_syslog
  host secure.com
  port 7514
  severity debug
  program fluentd
  hostname ${tag[1]}

  <buffer tag>
  </buffer>

  <format>
    @type single_value
    message_key msg
  </format>
</match>

Configuration

name	type	placeholder support	description
hostname	string	support	departure of log
host	string	support	syslog target host
port	integer (default: 514)		syslog target port
host_with_port	string	support	parameter for : style
facility	string (default: "user")	support	syslog facility
severity	string (default: "notice"	support	syslog severity
program	string (default: "fluentd"	support	syslog program name
protocol	enum (udp, tcp) (default: udp)		transfer protocol
tls	bool (default: false)		use TLS (tcp only)
ca_file	string		ca_file path (tls mode only)
client_cert	string		ca_file path (tls mode only)
client_key	string		ca_file path (tls mode only)
verify_mode	integer		SSL verification mode (tls mode only)
packet_size	integer (default: 1024)		size limitation for syslog packet
timeout	integer		TCP transfer timeout. if value is 0, wait forever
timeout_exception	bool (default: false)		if value is true, raise exception by transfer timeout
keep_alive	bool (default: false)		use TCP keep alive
keep_alive_idle	integer		set TCP keep alive idle time
keep_alive_cnt	integer		set TCP keep alive probe count
keep_alive_intvl	integer		set TCP keep alive probe interval

Common Configuration

Buffer Section

name	default
flush_mode	interval
flush_interval	5
flush_thread_interval	0.5
flush_thread_burst_interval	0.5

Format Section

name	default
@type	ltsv

License

=======

fluentd-syslog-client

fluentd plugin for sending logs to remote syslog server over ssl