Dustin C. Hatch
0fe296f7f3
[fluent-bit][0] is a generic, highly-configurable log collector. It was apparently initially developed for fluentd, but is has so many output capabilities that it works wil many different log aggregation systems, including Victoria Logs. Although Victoria Logs supports the Loki input format, and therefore _Promtail_ would work, I want to try to avoid depending on third-party repositories. _fluent-bit_ is packaged by Fedora, so there shouldn't be any dependency issues, etc. [0]: https://fluentbit.io
37 lines
813 B
Desktop File
37 lines
813 B
Desktop File
[Unit]
|
|
Description=Fluent Bit
|
|
Documentation=https://docs.fluentbit.io/manual/
|
|
Requires=network.target
|
|
After=network.target
|
|
StartLimitIntervalSec=5
|
|
StartLimitBurst=5
|
|
|
|
[Service]
|
|
Type=exec
|
|
ExecStart=/usr/bin/fluent-bit -c /etc/fluent-bit/fluent-bit.yml -Y
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
StateDirectory=fluent-bit
|
|
Restart=always
|
|
RestartSec=1
|
|
BindPaths=%S/fluent-bit
|
|
CapabilityBoundingSet=CAP_DAC_READ_SEARCH
|
|
LockPersonality=yes
|
|
MemoryDenyWriteExecute=yes
|
|
PrivateDevices=yes
|
|
PrivateTmp=yes
|
|
ProtectControlGroups=yes
|
|
ProtectHome=yes
|
|
ProtectHostname=yes
|
|
ProtectKernelModules=yes
|
|
ProtectKernelTunables=yes
|
|
ProtectSystem=strict
|
|
ReadOnlyPaths=/var/log
|
|
ReadWritePaths=%S/fluent-bit
|
|
RestrictNamespaces=yes
|
|
RestrictRealtime=yes
|
|
SystemCallArchitectures=native
|
|
TemporaryFileSystem=%S:ro
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|