vectordotdev
Windows event log to VictoriaLogs winlogbeat+Vector+VictoriaLogs
Vector：config [sources.source_winlog_event] type = "exec" command = ["D:\Lib\Logs\1.winlogbeat-8.10.4-windows-x86_64\winlogbeat-8.10.4-windows-x86_64\winlogbeat.exe", "-c", "D:\Lib\Logs\1.winlogbeat-8.10.4-windows-x86_64\winlogbeat-8.10.4-windows-x86_64\winlogbeat-My.yml"] mode = "streaming"
but： https://docs.victoriametrics.com/VictoriaLogs/data-ingestion/#log-collectors-and-data-ingestion-formats
Here is the list of log collectors and their ingestion formats supported by VictoriaLogs:
| How to setup the collector | Format: Elasticsearch | Format: JSON Stream | Format: Loki |
|---|---|---|---|
| Filebeat | Yes | No | No |
| Fluentbit | No | Yes | Yes |
| Logstash | Yes | No | No |
| Vector | Yes | No | Yes |
| Promtail | No | No | Yes |
Hello,
Are you using the http sink?
I see from the linked spec
VictoriaLogs accepts JSON line stream aka ndjson at http://localhost:9428/insert/jsonline endpoint.
Have you tried using the http sink with the json encoder, (https://vector.dev/docs/reference/configuration/sinks/http/#encoding.codec)
and the newline_delimited framing method? (https://vector.dev/docs/reference/configuration/sinks/http/#framing.method)
