splunk-connect-for-syslog
splunk-connect-for-syslog copied to clipboard
Configuration of SC4S hosted on ECS/Fargate
What is the sc4s version ? Latest version
Is there a pcap available? N/A
What the vendor name? N/A
What's the product name? N/A
** Feature Request description: ** Support to run SC4S on ECS/Fargate deployment/configuration
** Should it support TCP or UDP?** N/A
** Do you want to have it for local usage or prepare a github PR? ** Github PR will be great as it would be officially supported by splunk, but happy to start with local usage We have an overarching principle to lean on native aws serverless services and in this case we are trying to leverage aws-ecs & aws-fargate.
Can you kindly confirm/support this configuration mechanism? I.e. deploy/run the sc4s containers (docker based) orchestrated by aws-ecs with fargate-launchtype please? Currently we are facing errors while sc4s is trying to start.
Error Log
2024-04-23T15:46:41.207+02:00 starting syslog-ng [2024-04-23T13:46:43.079546] Failed to grab disk-buffer dirlock; filename='/var/lib/syslog-ng/syslog-ng-disk-buffer.dirlock', error='Bad file descriptor (9)' [2024-04-23T13:46:43.079546] Error initializing message pipeline; plugin_name='http', location='root generator dest_hec:5:5' Handling exit 1 and restarting