Configuration of SC4S hosted on ECS/Fargate

[krish-flutter]

What is the sc4s version ? Latest version

Is there a pcap available? N/A

What the vendor name? N/A

What's the product name? N/A

Feature Request description: Support to run SC4S on ECS/Fargate deployment/configuration

Should it support TCP or UDP? N/A

Do you want to have it for local usage or prepare a github PR? Github PR will be great as it would be officially supported by splunk, but happy to start with local usage We have an overarching principle to lean on native aws serverless services and in this case we are trying to leverage aws-ecs & aws-fargate.

Can you kindly confirm/support this configuration mechanism? I.e. deploy/run the sc4s containers (docker based) orchestrated by aws-ecs with fargate-launchtype please? Currently we are facing errors while sc4s is trying to start.

Error Log

• * 2024-04-23T15:46:41.207+02:00 starting syslog-ng [2024-04-23T13:46:43.079546] Failed to grab disk-buffer dirlock; filename='/var/lib/syslog-ng/syslog-ng-disk-buffer.dirlock', error='Bad file descriptor (9)' [2024-04-23T13:46:43.079546] Error initializing message pipeline; plugin_name='http', location='root generator dest_hec:5:5' Handling exit 1 and restarting
  • *

[fpunzohig]

Can someone provide an e.t.a. on this feature? We requested it as well in 2022.