This commit is contained in:
2026-03-13 17:45:42 +00:00
parent e92e180d4f
commit ac54b09c04

View File

@@ -15,12 +15,12 @@ data:
address = "0.0.0.0:1514"
protocol = "tcp"
labels = {
job = "syslog"
source = "external"
job = "syslog",
source = "external",
}
}
forward_to = [loki.process.syslog_labels.receiver]
forward_to = [loki.relabel.syslog_labels.receiver]
}
loki.source.syslog "external_udp" {
@@ -28,23 +28,43 @@ data:
address = "0.0.0.0:1514"
protocol = "udp"
labels = {
job = "syslog"
source = "external"
job = "syslog",
source = "external",
}
}
forward_to = [loki.process.syslog_labels.receiver]
forward_to = [loki.relabel.syslog_labels.receiver]
}
loki.process "syslog_labels" {
loki.relabel "syslog_labels" {
rule {
action = "replace"
source_labels = ["__syslog_message_hostname"]
target_label = "hostname"
}
stage.labels {
values = {
hostname = "__syslog_message_hostname"
app = "__syslog_message_app_name"
severity = "__syslog_message_severity"
facility = "__syslog_message_facility"
}
rule {
action = "replace"
source_labels = ["__syslog_message_app_name"]
target_label = "app"
}
rule {
action = "replace"
source_labels = ["__syslog_message_severity"]
target_label = "severity"
}
rule {
action = "replace"
source_labels = ["__syslog_message_facility"]
target_label = "facility"
}
rule {
action = "replace"
source_labels = ["__syslog_connection_ip_address"]
target_label = "sender_ip"
}
forward_to = [loki.write.default.receiver]