Need help with log-courier?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

driskell
408 Stars 112 Forks Apache License 2.0 2.4K Commits 10 Opened issues

Description

Log Courier, a lightweight log shipper with Logstash integration.

Services available

!
?

Need anything else?

Contributors list

# 81,255
C
Perl
aws-s3
fuse
1552 commits
# 1,982
Ruby
Java
Shell
logging
505 commits
# 29,686
Ruby
nagios
Racket
logging
21 commits
# 726,648
Ruby
Shell
Go
4 commits
# 29,739
C
otp
arp
TeX
4 commits
# 6,496
Shell
Go
Perl
Termina...
4 commits
# 62,739
Ruby
CSS
diesel
spacevi...
3 commits
# 314,156
Go
C
logstas...
elastic...
2 commits
# 434,032
Shell
go-micr...
CSS
HTML
2 commits
# 370,873
Shell
Elixir
Nim
Crystal
2 commits
# 745,808
Ruby
Shell
Go
2 commits
# 16,281
Clojure
bitbuck...
etl-fra...
Terrafo...
2 commits
# 77,573
Perl
Less
elastic
Node.js
2 commits
# 374,209
Shell
Go
pypi
ipv4
2 commits
# 164,096
Shell
Perl
C
dedupe
1 commit
# 34,954
Go
Google ...
helm
Kuberne...
1 commit
# 23,749
Python
centos
iot-dev...
iot-app...
1 commit
# 239,572
travis-...
chef-co...
Ember
Google ...
1 commit
# 152,363
Shell
CSS
couchdb
apache
1 commit
# 91,839
Go
bittorr...
golang
magnet-...
1 commit

Log Courier Suite

Build Status Latest Release

The Log Courier Suite is a set of lightweight tools created to ship and process log files speedily and securely, with low resource usage, to Elasticsearch or Logstash instances.

Log Courier

Log Courier is a lightweight shipper. It reads from log files and transmits events over the Courier protocol to a remote Logstash or Log Carver instance.

Compatible Logstash Versions

Log Courier is compatible with most Logstash versions with a single exception.

>=7.4.0
and
<7.6.0
use a version of JRuby that has a bug making it incompatible and causes log-courier events to stop processing after an indeterminable amount of time (see #370) - please upgrade to 7.6.0 which updates JRuby to a compatible version.

Log Carver

Log Carver is a lightweight event processor. It receives events over the Courier protocol and performs actions against them to manipulate them into the required format for storage within Elasticsearch, or further processing in Logstash. Connected clients do not receive acknowledgements until the events are acknowledged by the endpoint, whether that be Elasticsearch or another more centralised Log Carver, providing end-to-end guarantee.

Philosophy

  • Keep resource usage low and predictable at all times
  • Be efficient, reliable and scalable
  • At-least-once delivery of events, a crash should never lose events
  • Offer secure transports
  • Be easy to use

Documentation

Installation

Reference

Upgrading from 1.x to 2.x

There are many breaking changes in the configuration between 1.x and 2.x. Please check carefully the list of breaking changes here: Change Log.

Packages also now default to using a

log-courier
user. If you require the old behaviour of
root
, please be sure to modify the
/etc/sysconfig/log-courier
(CentOS/RedHat) or
/etc/default/log-courier
(Ubuntu) file.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.