initial commit
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
new file mode 100644
index 0000000..2b3c6a2
--- /dev/null
+++ b/CHANGELOG.rst
@@ -0,0 +1,6 @@
+rsyslog-formula
+==============
+
+0.0.1 (2015-08-03)
+
+- Initial formula setup
\ No newline at end of file
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..6f2b42f
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,13 @@
+Copyright (c) 2014-2015 tcp cloud a.s.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
\ No newline at end of file
diff --git a/README.rst b/README.rst
new file mode 100644
index 0000000..c45e22e
--- /dev/null
+++ b/README.rst
@@ -0,0 +1,117 @@
+
+============
+Heka Formula
+============
+
+Heka is an open source stream processing software system developed by Mozilla. Heka is a Swiss Army Knife type tool for data processing
+
+Sample pillars
+==============
+
+Basic log shipper streaming decoded rsyslog's logfiles using amqp broker as transport.
+From every message there is one amqp message and it's also logged to rsyslog's logfile in RST format.
+
+.. code-block:: yaml
+
+
+ rsyslog:
+ server:
+ enabled: true
+ input:
+ rsyslog-syslog:
+ engine: logstreamer
+ log_directory: /var/log
+ file_match: syslog\.?(?P<Index>\d+)?(.gz)?
+ decoder: RsyslogDecoder
+ priority: ["^Index"]
+ rsyslog-auth:
+ engine: logstreamer
+ log_directory: /var/log
+ file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
+ decoder: RsyslogDecoder
+ priority: ["^Index"]
+ decoder:
+ rsyslog:
+ engine: rsyslog
+ template: %TIMESTAMP% %HOSTNAME% %syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n
+ hostname_keep: TRUE
+ tz: Europe/Prague
+ output:
+ rabbitmq:
+ engine: amqp
+ host: localhost
+ user: guest
+ password: guest
+ vhost: /logs
+ exchange: logs
+ exchange_type: fanout
+ encoder: ProtobufEncoder
+ use_framing: true
+ rsyslog-logfile:
+ engine: logoutput
+ encoder: RstEncoder
+ message_matcher: TRUE
+ encoder:
+ rsyslog-logfile:
+ engine: RstEncoder
+
+
+Heka acting as message router and dashboard.
+Messages are consumed from amqp and sent to elasticsearch server.
+
+
+.. code-block:: yaml
+
+
+ rsyslog:
+ server:
+ enabled: true
+ input:
+ rabbitmq:
+ engine: amqp
+ host: localhost
+ user: guest
+ password: guest
+ vhost: /logs
+ exchange: logs
+ exchange_type: fanout
+ decoder: ProtoBufDecoder
+ splitter: HekaFramingSplitter
+ rsyslog-syslog:
+ engine: logstreamer
+ log_directory: /var/log
+ file_match: syslog\.?(?P<Index>\d+)?(.gz)?
+ decoder: RsyslogDecoder
+ priority: ["^Index"]
+ rsyslog-auth:
+ engine: logstreamer
+ log_directory: /var/log
+ file_match: auth\.log\.?(?P<Index>\d+)?(.gz)?
+ decoder: RsyslogDecoder
+ priority: ["^Index"]
+ decoder:
+ rsyslog:
+ engine: rsyslog
+ template: %TIMESTAMP% %HOSTNAME% %syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n
+ hostname_keep: TRUE
+ tz: Europe/Prague
+ output:
+ elasticsearch01:
+ engine: elasticsearch
+ host: localhost
+ port: 9200
+ encoder: es_json
+ message_matcher: TRUE
+ dashboard01:
+ engine: dashboard
+ ticker_interval: 30
+ encoder:
+ es-json:
+ engine: es-json
+ message_matcher: TRUE
+ index = logfile-%{%Y.%m.%d}
+
+Read more
+=========
+
+* https://rsyslogd.readthedocs.org/en/latest/index.html
diff --git a/VERSION b/VERSION
new file mode 100644
index 0000000..8a9ecc2
--- /dev/null
+++ b/VERSION
@@ -0,0 +1 @@
+0.0.1
\ No newline at end of file