[rsyslog-notify] Forum Thread: Re: Send logs using TCP + TLS - (Mode 'edit_last_post')

noreply at adiscon.com noreply at adiscon.com
Fri May 22 09:24:50 CEST 2015


User: Stannieman 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25637#p25637

Message: 
----------
[code:2wdnqjgs]
if $programname == 'Apache' then {
        action(Name="ApacheToLogstash"
                Type="omfwd"
                Target="LOGSTASHIP"
                Port="X"
                Protocol="tcp"
                Action.ResumeRetryCount="-1"
                StreamDriver="gtls"
                StreamDriverMode="1"
                StreamDriverAuthMode="anon"
               
StreamDriverCertFile="/etc/rsyslog/tls/logstashtlscert.crt"
                queue.Type="LinkedList"
                queue.FileName="queueApacheToLogstash"
                queue.SaveOnShutdown="on"
                queue.MaxDiskSpace="500m")
        stop
}
[/code:2wdnqjgs]

I also tried it without the StreamDriverCertFile line and with
$DefaultNetstreamDriverCertFile /etc/rsyslog/tls/logstashtlscert.crt above
the if block to no avail.
All examples are using a $DefaultNetstreamDriverCAFile here, but I don't
have a CA, just a private key and self signed cert.

My cert is OpenSSL though, should it be GnuTLS maybe?

EDIT: The same things with gnutls cert are nog working either.


More information about the rsyslog-notify mailing list