# systemd input plugin for [Fluentd](http://github.com/fluent/fluentd)

[![Build Status](https://travis-ci.org/reevoo/fluent-plugin-systemd.svg?branch=master)](https://travis-ci.org/reevoo/fluent-plugin-systemd) [![Code Climate GPA](https://codeclimate.com/github/reevoo/fluent-plugin-systemd/badges/gpa.svg)](https://codeclimate.com/github/reevoo/fluent-plugin-systemd) [![Gem Version](https://badge.fury.io/rb/fluent-plugin-systemd.svg)](https://rubygems.org/gems/fluent-plugin-systemd)

## Overview

**systemd** input plugin reads logs from the systemd journal

## Installation

Simply use RubyGems:

    gem install fluent-plugin-systemd

    or

    fluent-gem install fluent-plugin-systemd

    or

    td-agent-gem install fluent-plugin-systemd

## Configuration

    <source>
      type systemd
      path /var/log/journal
      filters [{ "_SYSTEMD_UNIT": "kube-proxy.service" }]
      pos_file kube-proxy.pos
      tag kube-proxy
      read_from_head true
    </source>

**path**

Path to the systemd journal, defaults to `/var/log/journal`

**filters**

Array of filters, see [here](http://www.rubydoc.info/gems/systemd-journal/Systemd%2FJournal%2FFilterable%3Afilter) for further
documentation, defaults to no filtering.

**pos file**

Path to pos file, stores the journald cursor. File is created if does not exist.

**read_from_head**

If true reads all available journal from head, otherwise starts reading from tail,
 ignored if pos file exists. Defaults to false.

**strip_underscores**

If true strips underscores from the beginning of systemds field names.
May be useful if outputting to kibana, as underscore prefixed fields are unindexed there.

**tag**

Required the tag for events generated by this input plugin.

## Dependencies

This plugin depends on libsystemd

## Running the tests

To run the tests simply run `rake test`

For systems without systemd the tests are run in a docker container. So you will need docker or systemd installed to work on this.

## Licence etc

[MIT](LICENCE)

Issues and pull requests welcome