Syslog-NG Insight allows rapid troubleshooting and operational visibility of Syslog-NG. It visualizes Syslog-NG statistics (generated by syslog-ng-ctl stats command).
Currently there are 15 different charts:
Sources
Sources (relative)
Destinations
Destinations (relative)
Source Journald
Source Journald (relative)
Destinations UDP
Destinations UDP (relative)
Destinations TCP
Destinations TCP (relative)
Destinations UDP by Loghost
Destinations TCP by Loghost
Destinations UDP (Summary Table)
Destinations TCP (Summary Table)
[monitor:///var/log/syslog-ng-stats.log]
index = test
sourcetype = syslog-ng:stats
Usually splunk is running as a restricted splunk user. If syslog-ng process running as root, then splunk cannot access the output of syslog-ng-ctl directly. In this case a root's cron job must be configured:
* * * * * ( date ; /usr/sbin/syslog-ng-ctl stats ) >> /var/log/syslog-ng-stats.log
added five new views
initial release
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.