Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Filebeat] Bring syslog input to GA #24729

Closed
mostlyjason opened this issue Mar 24, 2021 · 4 comments
Closed

[Filebeat] Bring syslog input to GA #24729

mostlyjason opened this issue Mar 24, 2021 · 4 comments
Assignees
Labels
Filebeat Filebeat Team:Elastic-Agent Label for the Agent team

Comments

@mostlyjason
Copy link

The syslog input on Filebeat is currently experiemental and it logs the following line:
2021-03-17T12:20:20.975+0100 WARN [cfgwarn] syslog/input.go:111 EXPERIMENTAL: Syslog input type is used

However, it is not communicated as experimental in the documentation. https://www.elastic.co/guide/en/beats/filebeat/7.11/filebeat-input-syslog.html

After discussing with engineers the reason it's experimental is the lack of RFC5424 and multiline support. We could document these limitations instead of letting them block the whole module from going GA.

The request for this issue is to remove the experimental log line, add the limitations to the docs, and make the input GA.

CC @mukeshelastic @andresrc @ph

@mostlyjason mostlyjason added Filebeat Filebeat Team:Elastic-Agent Label for the Agent team labels Mar 24, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/agent (Team:Agent)

@jamiehynds
Copy link

We discussed this among the security integrations team earlier this week, and would love to move syslog to GA.

Just an FYI, we had a community contribution for RFC5424 support recently, waiting on review. #23954

@faec faec mentioned this issue Apr 6, 2021
7 tasks
@ph ph assigned faec Apr 7, 2021
@ph
Copy link
Contributor

ph commented Apr 7, 2021

  • Remove Experimental for RFC31*
  • Add Beta for RFC5424
  • Add Beta mention for RFC5424 in the documentation.

@urso
Copy link

urso commented Apr 28, 2021

The work in progress meta issue with open tasks is here: #24954

Can we close one of the two?

@ph ph closed this as completed Apr 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Filebeat Filebeat Team:Elastic-Agent Label for the Agent team
Projects
None yet
Development

No branches or pull requests

6 participants