SRVANT

Documentation

Log Forwarders

To get logs into the SRVANT Agent, you need a lightweight log forwarder. The Agent accepts standard HTTP POST requests, which means it is compatible with almost any log shipper.

1. Select Data Sources

Choose the logs you want to forward to SRVANT. The configuration below will update dynamically.

2. Configuring Vector (Recommended)

Vector is an ultra-fast, lightweight log shipper built in Rust. It's the recommended way to tail files and forward them to SRVANT via HTTP POST.

/etc/vector/vector.yaml
sources:
  apache_access:
    type: file
    include:
      - /var/log/apache2/access.log
    read_from: end

transforms:
  parse_apache_access:
    type: remap
    inputs:
      - apache_access
    source: |-
      . |= parse_apache_log!(.message, format: "common")

sinks:
  srvant_apache_access:
    type: http
    inputs:
      - parse_apache_access
    uri: "http://AGENT_IP:10080/ingest/PIPELINE_ID_FOR_APACHE_ACCESS"
    encoding:
      codec: json
    # auth:
    #   strategy: bearer
    #   token: "YOUR_TOKEN"
Note: Be sure to replace AGENT_IP with the internal IP address or hostname of your SRVANT Agent, and PIPELINE_ID with the specific ingest path generated by the Control Plane. If your pipeline has authentication enabled, you must also replace YOUR_TOKEN with a valid pipeline token; otherwise, you can omit the authentication headers entirely.
← InstallationNext: Sinks