journalctl

README

Journal.d plugin

Reads journalctl output.

Config params

offsets_file string required

The filename to store offsets of processed messages.

journal_args []string default=-f -a

Additional args for journalctl. Plugin forces "-o json" and "-c cursor" or "-n all", otherwise you can use any additional args.

Have a look at https://man7.org/linux/man-pages/man1/journalctl.1.html

Generated using insane-doc

Documentation

Index

• func Factory() (pipeline.AnyPlugin, pipeline.AnyConfig)
• type Config
• type Plugin
  • func (p *Plugin) Commit(event *pipeline.Event)
  • func (p *Plugin) PassEvent(event *pipeline.Event) bool
  • func (p *Plugin) Start(config pipeline.AnyConfig, params *pipeline.InputPluginParams)
  • func (p *Plugin) Stop()
  • func (p *Plugin) Write(bytes []byte) (int, error)

Functions

func Factory

func Factory() (pipeline.AnyPlugin, pipeline.AnyConfig)

Types

type Config

type Config struct {

	// > @3@4@5@6
	// >
	// > The filename to store offsets of processed messages.
	OffsetsFile string `json:"offsets_file" required:"true"` // *

	// > @3@4@5@6
	// >
	// > Additional args for `journalctl`.
	// > Plugin forces "-o json" and "-c *cursor*" or "-n all", otherwise
	// > you can use any additional args.
	// >> Have a look at https://man7.org/linux/man-pages/man1/journalctl.1.html
	JournalArgs []string `json:"journal_args" default:"-f -a"` // *

	// for testing mostly
	MaxLines int `json:"max_lines"`
}

type Plugin

type Plugin struct {
	// contains filtered or unexported fields
}

func (*Plugin) Commit

func (p *Plugin) Commit(event *pipeline.Event)

func (*Plugin) PassEvent

func (p *Plugin) PassEvent(event *pipeline.Event) bool

func (*Plugin) Start

func (p *Plugin) Start(config pipeline.AnyConfig, params *pipeline.InputPluginParams)

func (*Plugin) Stop

func (p *Plugin) Stop()

func (*Plugin) Write

func (p *Plugin) Write(bytes []byte) (int, error)