Logspout Adapter for Graylog's GELF
Switch branches/tags
Nothing to show
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore Added README Jul 9, 2015
LICENSE first commit Jul 9, 2015
README.md Minor changes (#6) Jan 19, 2017
gelf.go Fixing array OOB issue on label slicing Feb 21, 2018


Graylog GELF Module for Logspout

This module allows Logspout to send Docker logs in the GELF format to Graylog via UDP.


To build, you'll need to fork Logspout, add the following code to modules.go

_ "github.com/micahhausler/logspout-gelf"

and run docker build -t $(whoami)/logspout:gelf


docker run \
    -v /var/run/docker.sock:/var/run/docker.sock \
    -p 8000:80 \
    micahhausler/logspout:gelf \

A note about GELF parameters

The following docker container attributes are mapped to the corresponding GELF extra attributes.

        "_container_id":   <container-id>,
        "_container_name": <container-name>,
        "_image_id":       <container-image-sha>,
        "_image_name":     <container-image-name>,
        "_command":        <container-cmd>,
        "_created":        <container-created-date>,
        "_swarm_node":     <host-if-running-on-swarm>

You can also add extra custom fields by adding labels to the containers.

for example a container with label gelf_service=servicename will have the extra field service


MIT. See License