In this lab, you will be tasked with creating a Fluentd configuration file. This configuration will have settings that will read the `/var/log/messages` file. You will add a filter to the configuration that will use the `grep `directive to search the events from the messages file and echo to the Fluentd log those events that contain the searched-for text. You will be provided a server that has Fluentd already installed and working.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create Configuration File
Create a file called
/etc/td-agent/filter-grep.conf. In this file, you will create a configuration that reads the contents of the/var/log/messagesfile and outputs to the Fluentd stdout.- Add a Filter
You will add a filter to the above configuration that uses
grepto search using<regexp>with the key ofmessagefor a pattern oftest. The output will be directed to the stdout for Fluentd.- Test the Filter Is Working
Start Fluentd via td-agent and use the
-coption to include the configuration file you just made.If you test by sending messages to the
/var/log/messageslog, you should use the wordtestas part of the testing.You should see only output that has
testin the string.The command
loggermay be used to test sending your message to the log.
