syslog drains for all cf components

[John McTeague]

I can attach a syslog drain to an application and recieve all relevant logs for that app (router, app, stager etc) but can I attach a syslog drain somewhere to get all the logs for the core cf components (uaa, cc etc)? They are all aggregated via the syslog_aggregator but I would like to feed them all into elasticsearch via logstash as I do for individual applications.

Thanks,

John

[Alex Jackson]

Hi John,

    I assume your running your own CF instance not using the run.pivotal.io instance.    If that is correct you should be able to change the syslog settings in your manifest to point at your logstash instance.    The manifest settings are below.    Just set them to match your logstash config and then do a bosh deploy with the manifest changes.   Hope that helps.

    - Alex.

syslog_aggregator.address:
    description: "IP address for syslog aggregator."

  syslog_aggregator.port:
    description: "TCP port of syslog aggregator."

  syslog_aggregator.all:
    description: "Define whether forwarders should send all their syslog data to our aggregator."


    default: false
  syslog_aggregator.transport:
    description: "Transport to be used when forwarding logs (tcp|udp|relp)."

    default: "tcp"

--
You received this message because you are subscribed to the Google Groups "Cloud Foundry Developers" group.
To view this discussion on the web visit https://groups.google.com/a/cloudfoundry.org/d/msgid/vcap-dev/48065fb0-3fe2-42f8-9fcc-d079eb9dbe75%40cloudfoundry.org.

To unsubscribe from this group and stop receiving emails from it, send an email to vcap-dev+u...@cloudfoundry.org.