How to send Elasticsearch 6.8 logs to syslog?

Dear all,

First post on these boards :slight_smile:

I've been tasked to configure some Elasticsearch 6.8 server to send its logs to syslog. Based on the official documentation, I came up with the following in /etc/elasticsearch/log4j2.properties:

https://logging.apache.org/log4j/2.x/manual/appenders.html#SyslogAppender

appender.syslog.type = Syslog
appender.syslog.name = SYSLOG
appender.syslog.facility = LOCAL5
appender.syslog.host = localhost
appender.syslog.port = 514
appender.syslog.protocol = UDP
appender.syslog.layout.type = PatternLayout
appender.syslog.layout.pattern = "local5: %d{yyyy.MM.dd HH:mm:ss} %-5p [%c] %m%n"

How does that look ?

Best regards,

Samuel

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.