Fluentd secure forwarding the logs
Following are the steps
on FluentD server side:
· Install fluentd secure forward plugin:
sudo /usr/sbin/td-agent-gem install fluent-plugin-secure-forward
· Append following configuration in
/etc/td-agent/td-agent.conf
<source>
type secure_forward
shared_key FLUENTD_SECRET
self_hostname efk
secure true
ca_cert_path /opt/ fluendconf /certificate/ca_cert.pem
ca_private_key_path /opt/ fluendconf /certificate/ca_key.pem
ca_private_key_passphrase
passphrase_for_private_CA_secret_key
</source>
· Generate CA certificate:
cd /opt/td-agent/embedded/lib/ruby/gems/2.1.0/bin/ sudo ./secure-forward-ca-generate /opt/fluendconf/certificate/ passphrase_for_private_CA_secret_key
· Restart the server
sudo service td-agent
restart
Following are the steps
on FluentD Agent side:
· Install fluentd secure forward plugin:
sudo
/usr/sbin/td-agent-gem install fluent-plugin-secure-forward
Append following configuration in /etc/td-agent/td-agent.conf
<match **>
type secure_forward
shared_key
FLUENTD_SECRET
self_hostname
${hostname}
secure true
ca_cert_path /opt/ fluendconf
/certificate/ca_cert.pem
<server>
host centralize_logging_server
</server>
</match>
Copy server’s ca_cert.pem file
copy servers ca_cert.pem file to /opt/fluendconf/certificate/
Restart the server
sudo service td-agent restart