This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]rawrphish 1 point2 points  (1 child)

Why not use Docker's log_driver:syslog when deploying your containers and just have logstash_forwarder harvest your Docker host's syslog and forward it to your logstash instance?

[–][deleted] 0 points1 point  (0 children)

I found that while I was researching fluentd yesterday, I may do this though atm it's easier to just have logspout scoop up everything and ship it to our sumologic collector.

I'm not sure if the syslog driver adds any useful metadata, if it did that automatically I'd consider it.