Sumo Logic Syslog Collector

• Dockerfile

    FROM sumologic/collector:latest-no-source
    ADD sumo-sources.json /etc/sumo-sources.json
    EXPOSE 514/udp
    EXPOSE 514
  

• sumo-sources.json

    {
      "api.version": "v1",
      "sources": [
        {
          "sourceType": "Syslog",
          "name": "syslog-collector-container-tcp",
          "port": 514,
          "protocol": "TCP",
          "encoding": "UTF-8",
          "forceTimeZone": false,
          "category": "hermes-sms"
        },
        {
          "sourceType": "Syslog",
          "name": "syslog-collector-container-udp",
          "port": 514,
          "protocol": "UDP",
          "encoding": "UTF-8",
          "forceTimeZone": false,
          "category": "hermes-sms"
        }
      ]
    }
  

• build an image

    $ docker build --tag="your-name/image-name" .
  

• push the image to remote registry

    $ docker push "your-name/image-name"
  

• using the image on docker-cloud; docker-cloud.yml

    sumologic:
      command: SUMO_ACCESS_ID SUMO_ACCESS_KEY
      deployment_strategy: every_node
      image: 'jumo/sumo-collector:latest'
      ports:
        - 514:514