remote-tcp.toml

[hekad]
pid_file = "/var/run/hekad-remote-tcp.pid"

[TcpInput]
address = ":5565"
parser_type = "message.proto"
decoder = "ProtobufDecoder"

[ProtobufDecoder]

[ESJsonEncoder]
index = "%{Type}-%{2006.01.02}"
es_index_from_timestamp = true
type_name = "%{Type}"

[ElasticSearchOutput]
message_matcher = "TRUE"
#message_matcher = "Type == 'system' || Type == 'apache'"
server = "http://localhost:9200"
encoder = "ESJsonEncoder"