Send messages to Elasticsearch data streams

Starting with version 4.8.0, AxoSyslog can send messages and metrics to Elasticsearch data streams to store your log and metrics data as time series data.

Minimal configuration:

destination d_elastic_data_stream {
  elasticsearch-datastream(
    url("https://elastic-endpoint:9200/my-data-stream/_bulk")
    user("elastic")
    password("ba253DOn434Tc0pY22OI")
  );
};

This driver is actually a reusable configuration snippet configured to send log messages using the http() driver using a template. You can find the source of this configuration snippet on GitHub.

Prerequisites

Username and password for an account that can send data to Elasticsearch data streams.

Options

Usually you just set the url(), user(), and password() options.

Since this destination is based on the http() destination, you can use the options of the http() destination if needed.