version: v1 removes: - /etc/rsyslog.conf - /etc/rsyslog.d/*.conf templates: - input: /config/templates/rsyslog/rsyslog.conf output: /etc/rsyslog.conf - input: /config/templates/rsyslog/outputs.conf.erb output: /etc/rsyslog.d/05-outputs.conf - input: /config/templates/rsyslog/drain.conf.erb output: /etc/rsyslog.d/10-drain.conf data: _pki: cacert: /dev/shm/identity/ca/cacerts.pem client: cert: /dev/shm/identity/client/certificates/client.pem key: /dev/shm/identity/client/keys/client-key.pem _funnel: host: ajna-api.salesforce.com port: 443 scheme: https _funnel_logs: host: funnel.funnelapi.foundation.aws-prod1-useast1.aws.sfdc.cl port: 443 scheme: https api: data # Set restpath, content_type, batch_format based on `api` setting rest_path: v1/data/namespaces/sfdc.prod.sumo.logs/topics/logs.ext http_content_type: application/vnd.kafka.v1+json batch_format: kafkarest log_drain: # Enable debug mode. debug: true # Publish logs to Funnel. publish_logs: true # Publish enabled metrics to Funnel. publish_metrics: true # Parse Heroku dyno runtime-metrics and addon log-based metrics. runtime_metrics: true # Parse Heroku router logs into metrics. router_metrics: true # Enable internal self-metrics. self_metrics: true # Serving port. port: 5586 # Basic Authentication. basic_auth_file: /dev/shm/auth/htpasswd # Set base environment for this drain environment: # Set base cloud value for this drain cloud: # UUID for this Drain. uuid: 19b2c58d-210f-4782-9a07-00426082ed52 # Impstats reporting interval. stats_interval_seconds: 60 # Main ruleset and output action queue sizes. queue_size: 100000 # workers > 1 does not appear to have any appreciable effect. logs_batch_worker_threads: 1 # Buffer 10000 logs per batch by default. logs_batch_size: 10000 # Buffer up to 10MB by default. Funnel accepts up to 25MB batches. logs_batch_max_bytes: 10000000 # Wait for up to 10 seconds by default between batch flushes. logs_batch_timeout_ms: 10000 # The "http_*" fields correspond to imhttp/civetweb HTTP options. # Reference https://github.com/civetweb/civetweb/blob/master/docs/UserManual.md # Heroku router logs access requests too, no need to log twice. http_access_log_file: /dev/null http_error_log_file: /dev/stderr http_num_threads: 50 http_listen_backlog: 32 http_connection_queue: 16 # Document root used to serve received logs for testing abd debugging. http_document_root: /www/data # DNR (Detection n' Response) filtering. filter_dnr_logs: true filter_dnr_logs_expression: # In proxy mode, allow nginx to log locally. syslog_udp_port: 10514