argo is a really dumb and simple JSON log file forwarder to ElasticSearch.
- harversts multiple files
- sends events to the specified elasticsearch host (currently compatible with v7)
- registers file offset state in boltdb
argo is just a personal project. There is absolutely no reason to try it in any kind of environment :)
Assuming you have Go 1.11 or later you can build argo with:
$ makeRun the tiny test suite with:
make testThe following settings are currently supported:
| Setting | Description | Default |
|---|---|---|
host (string) |
The elasticsearch host URL | "" |
paths ([]string) |
The file paths to forward | [] |
dispatch_interval (int64) |
Seconds to wait until next dispatch to the ES host | 5 |
timeout (int64) |
Seconds to wait until closing the connection to the ES host | 10 |
dead_time (string) |
Duration to keep files alive after being inactive | "24h" |
For a sample configuration file refer to config.sample.json.
To start argo, a configuration file is needed:
$ ./argo --config config.jsonYou can use config.sample.json as a starting point.
You can also set the name of the boltdb file with the --registry flag:
$ ./argo --config config.json --registry ma.dbIt defaults to
argo.db.