...
To enable this feature 3 steps are required:
- Install and configure store Store plugin.
- Configure manually each syslog agent.
Plugin install and configure
- The plugin is located at /installs/tech-preview/es-changes-feed-plugin.zip
- In order to extract the plugin please follow the procedure :
- cd /installs/tech-preview
- unzip es-changes-feed-plugin.zip
- The command will create the following files in the directory /installs/tech-preview :
- MonTierEventsFeedPlugin.zip
- MonTierEventsFeedPlugin.zip.md5
To install plugin just run commands:
cd /app/elasticsearch_base
bin/plugin install file:///installs/tech-preview/MonTierEventsFeedPlugin.zip
Approve the installation by pressing Y to the prompt question "Continue with installation? [y/N]"
To remove plugin issue command : bin/plugin remove file:///installs/tech-preview/MonTierEventsFeedPlugin.zip
Configure each Store node number 2 or 4 as follow:
- cd /app/elasticsearch_nodes/config/MonTier-es-raw-trans-Node-2
- Edit file elasticsearch.yml
add to the end of file the parameters:
Parameter Values Description montier.events.feed.syslog.protocol tcp or udp the protocol used to send syslog : tcp
- : 127.0.0.1
montier.events.feed.syslog.host : 60030ip addressv4 or valid hostname target syslog agent hostname montier.events.feed.syslog.port : falseinteger 1-65535 target syslog agent port montier.events.feed.syslog.ssl : DPOD-MSC1false or true enable / disable ssl montier.events.feed.appname
montier.events.feed.disable: falsetext A-Z|a-z|0-9 name - 8 chars syslog application name Configure syslog agent