Hi we are trying to transport several .log files to a Forwarder by syslog.
We used some bash scripts to do so, but it was just way too slow for us.(nearly 1MB/min)
Is there anyone know a faster way?
Thanks.
You might want to take inspiration from this .conf17 talk: https://conf.splunk.com/conf-online.html?search=FN122172#/
Which uses a simple python script to send data to a HEC receiver.
Alternatively:
install a UF on the system where the log files are.
Or write a faster bash script (perhaps you can share what you had now).
Or configure an rsyslog/syslog-ng daemon to read from those files and then forward to a syslog receiver on the Forwarder.
You might want to take inspiration from this .conf17 talk: https://conf.splunk.com/conf-online.html?search=FN122172#/
Which uses a simple python script to send data to a HEC receiver.
Alternatively:
install a UF on the system where the log files are.
Or write a faster bash script (perhaps you can share what you had now).
Or configure an rsyslog/syslog-ng daemon to read from those files and then forward to a syslog receiver on the Forwarder.
Thanks! I might try HEC!