.
This commit is contained in:
@@ -15,12 +15,12 @@ data:
|
||||
address = "0.0.0.0:1514"
|
||||
protocol = "tcp"
|
||||
labels = {
|
||||
job = "syslog"
|
||||
source = "external"
|
||||
job = "syslog",
|
||||
source = "external",
|
||||
}
|
||||
}
|
||||
|
||||
forward_to = [loki.process.syslog_labels.receiver]
|
||||
forward_to = [loki.relabel.syslog_labels.receiver]
|
||||
}
|
||||
|
||||
loki.source.syslog "external_udp" {
|
||||
@@ -28,23 +28,43 @@ data:
|
||||
address = "0.0.0.0:1514"
|
||||
protocol = "udp"
|
||||
labels = {
|
||||
job = "syslog"
|
||||
source = "external"
|
||||
job = "syslog",
|
||||
source = "external",
|
||||
}
|
||||
}
|
||||
|
||||
forward_to = [loki.process.syslog_labels.receiver]
|
||||
forward_to = [loki.relabel.syslog_labels.receiver]
|
||||
}
|
||||
|
||||
loki.process "syslog_labels" {
|
||||
loki.relabel "syslog_labels" {
|
||||
rule {
|
||||
action = "replace"
|
||||
source_labels = ["__syslog_message_hostname"]
|
||||
target_label = "hostname"
|
||||
}
|
||||
|
||||
stage.labels {
|
||||
values = {
|
||||
hostname = "__syslog_message_hostname"
|
||||
app = "__syslog_message_app_name"
|
||||
severity = "__syslog_message_severity"
|
||||
facility = "__syslog_message_facility"
|
||||
}
|
||||
rule {
|
||||
action = "replace"
|
||||
source_labels = ["__syslog_message_app_name"]
|
||||
target_label = "app"
|
||||
}
|
||||
|
||||
rule {
|
||||
action = "replace"
|
||||
source_labels = ["__syslog_message_severity"]
|
||||
target_label = "severity"
|
||||
}
|
||||
|
||||
rule {
|
||||
action = "replace"
|
||||
source_labels = ["__syslog_message_facility"]
|
||||
target_label = "facility"
|
||||
}
|
||||
|
||||
rule {
|
||||
action = "replace"
|
||||
source_labels = ["__syslog_connection_ip_address"]
|
||||
target_label = "sender_ip"
|
||||
}
|
||||
|
||||
forward_to = [loki.write.default.receiver]
|
||||
|
||||
Reference in New Issue
Block a user