Docker syslog with logstash tcp input plugin


(Rok) #1

Hi,

is it safe to use the docker syslog logging Driver with the tcp Input plugin and the persistent Queue enabled in logstash? Do logging Events in case of back pressure (Input Queue full) correctly prevent the syslog to stop sending Events (and thus losing them) and also take care that the buffers on the application side don't get overloaded?

How about using filebeat, is this perhaps the better way for handling such Scenarios?

Regards,
Rok


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.