flume-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alireza <alireza.shahri...@gmail.com>
Subject flume keepFields option for having complete syslog event not working
Date Tue, 24 Jan 2017 07:47:02 GMT
hi
i want to preserve syslog UDP  priority field and etc.. that flume extract
to header,when i use fill_roll
i knew that i have to use keepFields = true  but it dosent work?
what about kafak ? i want to have complete packet in kafka topic,but
keepFields dosent work

my config :
#name the components on this agent
a1.sources = r1
a1.sinks = k1
a1.channels = c1

# Describe/configure the source
a1.sources.r1.type = syslogudp
a1.sources.r1.bind = 192.168.30.102
a1.sources.r1.port = 514


# Describe the sink
a1.sinks.k1.type = file_roll
a1.sinks.k1.sink.directory = /ramdisk
a1.sinks.k1.sink.rollInterval = 20
a1.sinks.k1.sink.serializer = header_and_text
a1.sinks.k1.sink.keepFields = true
a1.sinks.k1.sink.serializer.appendNewline = true

#a1.sources.r1.interceptors = i1
#a1.sources.r1.interceptors.i1.type = timestamp

#a1.sinks.k1.serializer = avro_event
#a1.sinks.k1.serializer.compressionCodec = snappy

# Use a channel which buffers events in memory
a1.channels.c1.type = memory
a1.channels.c1.capacity = 1000
a1.channels.c1.transactionCapacity = 100
#agent.channels.c1.use-fast-replay = true

# Bind the source and sink to the channel
a1.sources.r1.channels = c1
a1.sinks.k1.channel = c1

Mime
View raw message