Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow filtering systemd unit in the journald input #227

Open
camdencheek opened this issue Nov 30, 2020 · 0 comments
Open

Allow filtering systemd unit in the journald input #227

camdencheek opened this issue Nov 30, 2020 · 0 comments
Labels
enhancement New feature or request

Comments

@camdencheek
Copy link
Contributor

The journald_input operator currently does not allow the user to filter to certain streams. Often, users are only interested in logs from a specific systemd unit. We can filter after the fact with a filter operator, but that still requires ingesting and parsing all the journald logs even if we're only interested in a small fraction of them. The journalctl executable we use supports the --unit <systemd_unit> parameter, which will allow us to filter before the logs ever make it to stanza.

In addition to this, we may want to add the option to specify arbitrary additional arguments since journalctl provides many filtering, format, and other options. For example, users can specify which fields they want included, specify a minimum priority level, or include only logs from the latest boot.

@camdencheek camdencheek added the enhancement New feature or request label Nov 30, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant