Markus Bergholz
Markus Bergholz
@e-alfred do you have time to target this one?
https://docs.fluentbit.io/manual/pipeline/outputs/syslog > ...It supports RFC3164 and RFC5424 formats through different transports such as UDP, TCP or **TLS**. There is already the parameter `mode` that supports `tls`.
hm I hit a similar problem using fluent-bit 2.0.6 ``` [2022/12/16 09:59:31] [error] [io_tls] handshake connection #40 to tcp://10.127.19.219:21626 timed out after 10 seconds [2022/12/16 09:59:31] [debug] [downstream] connection #40...
This is the configuration that opnsense creates ``` ### log target 98c20079-7c9e-4ce5-8081-3da30e814a64 : #### filter f_98c200797c9e4ce580813da30e814a64_program { program("audit") or program("firewall") or program("openvpn") }; filter f_98c200797c9e4ce580813da30e814a64_level { level(info,notice,warn,err,crit,alert,emerg) }; destination d_98c200797c9e4ce580813da30e814a64...
I get it work with a custom config now ``` destination influx { network( "influxdb.xxx.de" transport("tls") port(9997) ip-protocol(4) tls( ca-file("/etc/ssl/cert.pem") ca_dir("/etc/ssl/certs/*") peer_verify(optional-trusted) ) ); }; log { source(s_all); destination(influx); };...
Another thing I've observed.... My debug/dev config works fine. ``` [SERVICE] flush 1 grace 1 log_level debug parsers_file /etc/fluent-bit/parsers.conf Streams_File /etc/fluent-bit/stream_processor.conf [INPUT] name syslog listen 0.0.0.0 port 9997 mode tcp...
It works now. It was a network permission issue. But now fluent-bit is dying from time to time ``` [0] vpn.syslog: [1671554537.000000000, {"pri"=>"134", "time"=>"Dec 20 16:42:17", "host"=>"vpn.aws.xxx.de", "ident"=>"filterlog", "pid"=>"86931", "message"=>"57,,,c1eff64cbafdd6b80448f92cd4aff7e5,enc0,match,pass,out,4,0x0,,63,1978,0,none,17,udp,64,10.103.0.6,10.112.30.170,54928,53,44"}]...
Increasing the debug level doesn't bring more information @leonardo-albertovich ``` [2022/12/20 15:46:57] [debug] [input chunk] update output instances with new chunk size diff=277 [2022/12/20 15:46:57] [debug] [input chunk] update output...
`net` and `ipconfig` parameter has both no effect.