instantlinux/rsyslogd repository overview

⁠rsyslogd

Run your central rsyslog in a high-availability container on top of shared storage. Then send all that into Splunk or wherever.

Why is this image customized? I couldn't find a stock Docker rsyslogd image that includes logrotate. This also includes the rsyslog-mysql module, which you can use to send logs to a database.

⁠Usage

Set up a load balancer with your desired port number and aim it at this. Put your /etc/rsyslog.d and /etc/logrotate.d customizations into read-only volume mounts. Map /var/log to a persistent volume if you want to preserve it. There's really not much to this.

Example kubernetes and docker-compose resource definition files are provided here along with a helm chart. This repo has complete instructions for building a kubernetes cluster⁠ where you can launch with helm⁠ or kubernetes.yaml⁠ using make and customizing Makefile.vars⁠ after cloning this repo:

git clone https://github.com/instantlinux/docker-tools.git
cd docker-tools/k8s
make rsyslogd

⁠Variables

Most configuration is done via config file; see the ConfigMap defined in kubernetes.yaml.

⁠Contributing

If you want to make improvements to this image, see CONTRIBUTING⁠.