Dear all,
First post on these boards
I've been tasked to configure some Elasticsearch 6.8 server to send its logs to syslog. Based on the official documentation, I came up with the following in /etc/elasticsearch/log4j2.properties:
https://logging.apache.org/log4j/2.x/manual/appenders.html#SyslogAppender
appender.syslog.type = Syslog
appender.syslog.name = SYSLOG
appender.syslog.facility = LOCAL5
appender.syslog.host = localhost
appender.syslog.port = 514
appender.syslog.protocol = UDP
appender.syslog.layout.type = PatternLayout
appender.syslog.layout.pattern = "local5: %d{yyyy.MM.dd HH:mm:ss} %-5p [%c] %m%n"
How does that look ?
Best regards,
Samuel