Fluentbit

Docs

• https://docs.fluentbit.io/manual/pipeline/inputs/syslog
• https://docs.fluentbit.io/manual/local-testing/logging-pipeline

docker-compose.yaml

version: "3.7"

services:
  fluent-bit:
    image: fluent/fluent-bit
    volumes:
      - ./fluent-bit.conf:/fluent-bit/etc/fluent-bit.conf

fluent-bit.conf

[SERVICE]
    Flush        1
    Parsers_File parsers.conf

# [INPUT]
#     Name      syslog
#     Parser    syslog-rfc3164
#     Path      /tmp/fluent-bit.sock
#     Mode      unix_udp
#     Unix_Perm 0644

[INPUT]
    Name     syslog
    Parser   syslog-rfc3164
    Listen   0.0.0.0
    Port     5140
    Mode     tcp

[INPUT]
    Name     syslog
    Parser   syslog-rfc3164
    Listen   0.0.0.0
    Port     5140
    Mode     udp

[OUTPUT]
    Name      stdout
    Match     *

Send some test messages

logger --tcp --port 5140 -n 172.22.0.2 "Test message tcp1"
logger --udp --port 5140 -n 172.22.0.2 "Test message udp1"