metadata/service/server/router.yml

applications:
- heka
_param:
  heka_router_output_host: localhost
  heka_router_input_host: localhost
  heka_router_input_user: guest
  heka_router_input_password: guest
  heka_router_input_vhost: /heka
  heka_router_input_exchange: logs

parameters:
  heka:
    server:
      enabled: true
      input:
        rabbitmq:
          engine: amqp
          host: ${_param:heka_router_input_host}
          user: ${_param:heka_router_input_user}
          password: ${_param:heka_router_input_password}
          vhost: ${_param:heka_router_input_vhost}
          exchange: ${_param:heka_router_input_exchange}
          exchange_type: fanout
          decoder: ProtoBufDecoder
          splitter: HekaFramingSplitter
        rsyslog-syslog:
          engine: logstreamer
          log_directory: /var/log
          file_match: syslog\.?(?P<Index>\d+)?(.gz)?
          decoder: RsyslogDecoder
          priority: ["^Index"]
        rsyslog-auth:
          engine: logstreamer
          log_directory: /var/log
          file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
          decoder: RsyslogDecoder
          priority: ["^Index"]
      decoder:
        rsyslog:
          engine: rsyslog
          template: %TIMESTAMP% %HOSTNAME% %syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n
          hostname_keep: TRUE
          tz = Europe/Prague
      output:
        elasticsearch01:
          engine: elasticsearch
          host: ${_param:heka_router_output_host}
          port: 9200
          encoder: es_json
          message_matcher: TRUE
        dashboard01:
          engine: dashboard
          ticker_interval: 30
      encoder:
        es-json:
          engine: es-json
          message_matcher: TRUE
          index: logfile-%{%Y.%m.%d}