diff --git a/etc/agent.conf.example b/etc/agent.conf.example new file mode 100644 index 000000000..750e6a0b2 --- /dev/null +++ b/etc/agent.conf.example @@ -0,0 +1,30 @@ +input { + file { + path => [ "/var/log/messages", "/var/log/*.log" ] + type => "linux-syslog" + } +} + +filter { + grok { + type => "linux-syslog" + pattern => "%{SYSLOGLINE}" + } + + date { + type => "linux-syslog" + timestamp => "MMM dd HH:mm:ss" + timestamp8601 => ISO8601 + } +} + +output { + stdout { + debug => true + } + + elasticsearch { + index => "logstash" + type => "%{@type}" + } +}