From f9b5ff7f68ac91baf9a4b937305f78eb0e653d3a Mon Sep 17 00:00:00 2001
From: marius <marius@noreply.localhost>
Date: Fri, 5 May 2023 15:13:16 +0000
Subject: [PATCH] Adding fluentd config for loglab

---
 fluentd/loglab.conf | 55 +++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
 create mode 100644 fluentd/loglab.conf

diff --git a/fluentd/loglab.conf b/fluentd/loglab.conf
new file mode 100644
index 0000000..e9656d9
--- /dev/null
+++ b/fluentd/loglab.conf
@@ -0,0 +1,55 @@
+<source>
+  @type tail
+  path /var/log/remote/**/*.log
+  pos_file /var/log/remote/teleport_log.pos
+  tag teleport.log
+  read_from_head true
+  <parse>
+    @type json
+  </parse>
+</source>
+
+<source>
+  @type udp
+  tag rsyslog.udp
+  port 33333
+  bind 0.0.0.0
+  format json
+</source>
+
+<match teleport.log>
+  @type influxdb2
+  url http://localhost:8086
+  token deleted
+  use_ssl false
+  bucket bs
+  org bs
+  measurement teleport_logs
+  tag_fluentd             true
+  field_cast_to_float     true
+  <buffer>
+    @type memory
+    flush_mode interval
+    flush_interval 10s
+    flush_thread_count 2
+    chunk_limit_size 2m
+    queue_limit_length 8
+  </buffer>
+</match>
+
+<match rsyslog.udp>
+  @type influxdb2
+  url http://localhost:8086
+  token deleted
+  use_ssl false
+  bucket bs
+  org bs
+  <buffer>
+    @type memory
+    flush_mode interval
+    flush_interval 10s
+    flush_thread_count 2
+    chunk_limit_size 2m
+    queue_limit_length 8
+  </buffer>
+</match>
\ No newline at end of file