Question

I’ve been experimenting with Logstash’s Loggly output, and have noticed that it makes one HTTP POST request for each log event that is read from the input.

My configuration looks like this:

input {
    file {
        type => "some-logs"
        path => "/my-log-file.log"
        codec => "json"
    }
}
output {
    loggly {
        host => "logs-01.loggly.com"
        key => "loggly-customer-key"
        proto => "https"
    }
}

Loggly provides a bulk API that allows you to send multiple log events in a single POST request. Is it possible to configure the Loggly output to use this batch API instead of the default inputs API?

Thanks

Was it helpful?

Solution

Looks like this isn't possible with the current version of the plugin. Instead, I'm using Logback Extensions batch mode and removing Logstash from my solution altogether.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top