Send JSON from rsyslog to Kibana Send JSON from rsyslog to Kibana json json

Send JSON from rsyslog to Kibana


I've never used it, but it looks like you are missing things from your config file. The docs have a pretty thorough example:

module(load="omelasticsearch")template(name="testTemplate"     type="list"     option.json="on") {       constant(value="{")         constant(value="\"timestamp\":\"")      property(name="timereported" dateFormat="rfc3339")         constant(value="\",\"message\":\"")     property(name="msg")         constant(value="\",\"host\":\"")        property(name="hostname")         constant(value="\",\"severity\":\"")    property(name="syslogseverity-text")         constant(value="\",\"facility\":\"")    property(name="syslogfacility-text")         constant(value="\",\"syslogtag\":\"")   property(name="syslogtag")       constant(value="\"}")     }action(type="omelasticsearch"   server="myserver.local"   serverport="9200"   template="testTemplate"   searchIndex="test-index"   searchType="test-type"   bulkmode="on"   queue.type="linkedlist"   queue.size="5000"   queue.dequeuebatchsize="300"   action.resumeretrycount="-1")

Based on what you are trying to do, it looks like you need to plug in localserverhere where it shows myserver.local. It also looks like you have ES accepting stuff on port 80, so you'd put in 80 instead of 9200.