Bug 89103

Summary: RFE: Support different output formats for systemd-journal-upload
Product: systemd Reporter: Duncan Innes <duncan>
Component: generalAssignee: systemd-bugs
Status: NEW --- QA Contact: systemd-bugs
Severity: normal    
Priority: medium    
Version: unspecified   
Hardware: Other   
OS: All   
i915 platform: i915 features:

Description Duncan Innes 2015-02-12 13:41:54 UTC
s-j-upload is currently designed to export data from clients to a centralised s-j-remote instance.

Supporting alternate output formats such as JSON will enable s-j-upload to export directly to a wide range of log consolidators.  Examples are Logstash, Splunk, Graylog2 etc on the Open Source side, with a wide range of proprietary corporate applications also out there.

While s-j-remote is build as the default recipient of data from s-j-upload, not every user will be interested in consolidating their logs in this way.

Perhaps this could be packaged separately to the core systemd applications so user would have to specifically install this package in order to alter the output from s-j-upload?
Comment 1 Zbigniew Jedrzejewski-Szmek 2015-02-12 14:33:53 UTC
We already have json formatting implemented in journalctl. So it would be a matter of hooking that up in s-j-upload, probably not too much work. I'd be happy to take a patch to do that, but I'm unlikely to implement this myself. Primary reason is that I don't run anything like logstash/splunk/graylog2, so I wouldn't even know how to test if the thing is communicating properly.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.