Journald to Logstash HTTP Using FluentBit

The repository contains Ansible playbooks that facilitate the configuration of servers to transmit their logs from JournalD to a remote aggregator via HTTP. It includes example configurations for RSyslog and Fluent-Bit.

Requirements

• Qemu
• Libvirt
• Vagrant
• Vagrant-libvirt plugin
• Ansible

Initial Steps

# start servers
export LIBVIRT_DEFAULT_URI=qemu:///system
export VAGRANT_DEFAULT_PROVIDER=libvirt

vagrant box update
vagrant up

vagrant status
ssh
# install required Ansbile roles
ansible-galaxy install -r requirements.yml

Configure Forwarders

ansible-playbook ansible/main.yml

# test connection
curl -v -X POST http://192.168.123.50:8080/json \
      -H 'Content-Type: application/json' \
      -d '{"hello":"world","number":42, "bool": true}'

References

• geerlingguy/ansible-role-logstash
• Fluent Bit v2.1 Documentation
• orachide/ansible-role-fluentbit
• RSyslog Documentation
• Troubleshooting problems related to SELinux