search

tenzir / public-roadmap

The public roadmap of Tenzir
https://docs.tenzir.com/roadmap
4 stars 0 forks source link

Support Graylog / GELF #144

Closed mavam closed 5 months ago

mavam commented 6 months ago

We have the need to support Graylog-generated output (GELF). Fortunately there's a workaround today:

load tcp://0.0.0.0:9254
| shell "tr \'\0\' \'\n\'"
| read json

However, having a native read gelf would be desirable. To this end, we need to perform the following changes:

- [x] Make it possible to provide custom event separator to the `json` parser
- [x] Write a `gelf` parser alias that passes `\0` as separator
- [x] Write documentation of parser
- [x] Write a new Graylog integration section
mavam commented 6 months ago

https://github.com/tenzir/tenzir/pull/3768