
Currently there is no way to configure a CA certificate bundle file for fluentd to Elasticsearch communication. This change adds a new variable, 'fluentd_elasticsearch_cacert' with a default value set to the value of 'openstack_cacert. Closes-Bug: #1885109 Change-Id: I5bbf55a4dd4ccce9fa2635cee720139c088268e3
30 lines
1.0 KiB
Django/Jinja
30 lines
1.0 KiB
Django/Jinja
<match *.**>
|
|
@type copy
|
|
<store>
|
|
@type elasticsearch
|
|
host {{ elasticsearch_address }}
|
|
port {{ elasticsearch_port }}
|
|
scheme {{ fluentd_elasticsearch_scheme }}
|
|
{% if fluentd_elasticsearch_path != '' %}
|
|
path {{ fluentd_elasticsearch_path }}
|
|
{% endif %}
|
|
{% if fluentd_elasticsearch_scheme == 'https' %}
|
|
ssl_version {{ fluentd_elasticsearch_ssl_version }}
|
|
ssl_verify {{ fluentd_elasticsearch_ssl_verify }}
|
|
{% if fluentd_elasticsearch_cacert | length > 0 %}
|
|
ca_file {{ fluentd_elasticsearch_cacert }}
|
|
{% endif %}
|
|
{% endif %}
|
|
{% if fluentd_elasticsearch_user != '' and fluentd_elasticsearch_password != ''%}
|
|
user {{ fluentd_elasticsearch_user }}
|
|
password {{ fluentd_elasticsearch_password }}
|
|
{% endif %}
|
|
logstash_format true
|
|
logstash_prefix {{ kibana_log_prefix }}
|
|
flush_interval 15s
|
|
reconnect_on_error true
|
|
buffer_type file
|
|
buffer_path /var/lib/fluentd/data/elasticsearch.buffer/openstack.*
|
|
</store>
|
|
</match>
|