LogScale

logscale

Overview

Configuration

LogScaleOutput

url (*secret.Secret, optional)

Ingester URL is the URL of the Humio cluster you want to send data to.

Default: https://cloud.humio.com

token (*secret.Secret, optional)

An Ingest Token is a unique string that identifies a repository and allows you to send data to that repository.

Default: empty

rawstring (string, optional)

The raw string representing the Event. The default display for an Event in LogScale is the rawstring. If you do not provide the rawstring field, then the response defaults to a JSON representation of the attributes field.

Default: empty

attributes (string, optional)

A JSON object representing key-value pairs for the Event. These key-value pairs adds structure to Events, making it easier to search. Attributes can be nested JSON objects, however, we recommend limiting the amount of nesting.

Default: “–scope rfc5424 –exclude MESSAGE –exclude DATE –leave-initial-dot”

timezone (string, optional)

The timezone is only required if you specify the timestamp in milliseconds. The timezone specifies the local timezone for the event. Note that you must still specify the timestamp in UTC time.

Default: -

extra_headers (string, optional)

This field represents additional headers that can be included in the HTTP request when sending log records to Falcon’s LogScale.

Default: empty

content_type (string, optional)

This field specifies the content type of the log records being sent to Falcon’s LogScale.

Default: “application/json”

disk_buffer (*DiskBuffer, optional)

This option enables putting outgoing messages into the disk buffer of the destination to avoid message loss in case of a system failure on the destination side. For details, see the Syslog-ng DiskBuffer options.

Default: false

body (string, optional)

Default: -

batch_lines (int, optional)

Default: -

batch_bytes (int, optional)

Default: -

batch_timeout (int, optional)

Default: -

persist_name (string, optional)

Default: -