juhaszviktor / syslog-ng-incubator Goto Github PK

Elasticsearch automatically generates _id to uniquely identify a document in an index.
It would be nice to be able to override that by using a template, e.g. $RCPTID.
Option could be called document_id or custom_id

Use a list for server instead of a string: usually ppl have multiple nodes in cluster, and this could also autodiscover when left empty

Add a timestamping option that accepts either {daily,weekly,monthly,yearly) or a indexsuffix that would accept stftime type formatting e.g. -%y.%m.%d so we can have UTC dependant indices.
This cannot at the time be handled in syslog-ng because $YEAR, $MONTH, and $DAY macros are not UTC but local TZ

It would be nice to be able to choose between node and transport mode.
In the case of node mode, one should also be able to choose the node's name