An enhancement request to splunk log driver for Docker containers to include an option to mention the customized hostnames, I read an article on http://dev.splunk.com/view/event-collector/SP-CAAAE6P#meta, so all that's required here is for the Splunk log driver to support a "--log-opt splunk-host=my-special-hostname" type parameter to allow for the supplied host value to be customized.
Is it possible to add the my-special-hostname during extraction ?
line: 2017/01/23 09:16:40 [info] 14#0: *80000 client closed connection while SSL handshaking error
source: stderr
tag: Bhavesh-DEV-docker/image_name
}
Show as raw text
• host = vc2c_name
• source = http:pi_docker
• sourcetype = json_no_timestamp
If you see the host name is vc2c_name rather what we want is to have the logging driver put the host name as Bhavesh-DEV for instance akin to what we manipulate in the forwarders inputs.conf/server.conf in the Universal forwarder.
↧