You can use this docker image to setup a central rsyslog server that ships all logs to an elasticsearch cluster and creates a log file per %programname% to /var/log/remote.
docker run \
--name central-rsyslog \
-p 514:514 \
-p 514:514/udp \
-e ELASTICSEARCH_HOST=[ELASTICSEARCH_ENDPOINT, e.g. logs.example.com] \
-v /vol/logs:/var/log/remote \
pindar/docker-rsyslog
Content type
Image
Digest
sha256:fef5e4492…
Size
104.7 MB
Last updated
over 11 years ago
docker pull pindar/docker-rsyslog