Sumo Logic Hosted Collector
개요
Observability Pipelines의 Sumo Logic Hosted Collector 소스를 사용하여 Sumo Logic Hosted Collector로 전송된 로그를 수신하세요.
전제 조건
To use Observability Pipelines’ Sumo Logic source, you have applications sending data to Sumo Logic in the expected format.
To use Observability Pipelines’ Sumo Logic destination, you have a Hosted Sumo Logic Collector with a HTTP Logs source, and the following information available:
- The bind address that your Observability Pipelines Worker will listen on to receive logs. For example,
0.0.0.0:80. - The URL of the Sumo Logic HTTP Logs Source that the Worker will send processed logs to. This URL is provided by Sumo Logic once you configure your hosted collector and set up an HTTP Logs and Metrics source.
See Configure HTTP Logs Source on Sumo Logic for more information.
설정
시크릿 관리: Sumo Logic 주소의 식별자만 입력하세요. 실제 값은 입력하지 마세요.
파이프라인을 설정할 때 이 소스를 설정하세요. 파이프라인은 UI, API 또는 Terraform을 사용하여 설정할 수 있습니다. 이 섹션의 지침은 UI에서 소스를 설정하기 위한 것입니다.
파이프라인 UI에서 Sumo Logic 소스를 선택한 후 Sumo Logic 주소에 대한 식별자를 입력합니다. 비워두면 기본값이 사용됩니다.
If you enter secret identifiers and then choose to use environment variables, the environment variable is the identifier entered and prepended with DD_OP_. For example, if you entered PASSWORD_1 for a password identifier, the environment variable for that password is DD_OP_PASSWORD_1.
선택적 설정
Decoding 드롭다운 메뉴에서 입력 형식에 따라 원시 Bytes, JSON, Graylog Extended Log Format(Gelf) 또는 Syslog를 선택하세요. 디코딩을 선택하지 않으면 기본값인 JSON이 사용됩니다.
시크릿 기본값
These are the defaults used for secret identifiers and environment variables.
- Sumo Logic 주소 식별자:
- Observability Pipelines Worker가 원래 Sumo Logic HTTP 소스용으로 의도된 로그를 수신하기 위해 수신 대기하는 바인딩 주소(예:
0.0.0.0:80.)를 참조합니다. - 기본 식별자는
SOURCE_SUMO_LOGIC_ADDRESS입니다.
- Sumo Logic address:
- The bind address that your Observability Pipelines Worker listens on to receive logs originally intended for the Sumo Logic HTTP Source. For example,
0.0.0.0:80.
Note: /receiver/v1/http/ path is automatically appended to the endpoint. - The default environment variable is
DD_OP_SOURCE_SUMO_LOGIC_ADDRESS.
Send logs to the Observability Pipelines Worker over Sumo Logic HTTP Source
After you install the Observability Pipelines Worker and deploy the configuration, the Worker exposes HTTP endpoints that uses the Sumo Logic HTTP Source API.
To send logs to your Sumo Logic HTTP Source, you must point your existing logs upstream to the Worker:
curl -v -X POST -T [local_file_name] http://<OPW_HOST>/receiver/v1/http/<UNIQUE_HTTP_COLLECTOR_CODE>
<OPW_HOST> is the IP/URL of the host (or load balancer) associated with the Observability Pipelines Worker. For CloudFormation installs, the LoadBalancerDNS CloudFormation output has the correct URL to use. For Kubernetes installs, the internal DNS record of the Observability Pipelines Worker service can be used, such as opw-observability-pipelines-worker.default.svc.cluster.local.
<UNIQUE_HTTP_COLLECTOR_CODE> is the string that follows the last forward slash (/) in the upload URL for the HTTP source that you provided in the Install the Observability Pipelines Worker step.
At this point, your logs should be going to the Worker, processed by the pipeline, and delivered to the configured destination.