spec

---
name: ingestor_syslog
packages: 
- logstash
- java8
templates:
  bin/ingestor_syslog_ctl: bin/ingestor_syslog_ctl
  bin/monit_debugger: bin/monit_debugger
  data/properties.sh.erb: data/properties.sh
  helpers/ctl_setup.sh: helpers/ctl_setup.sh
  helpers/ctl_utils.sh: helpers/ctl_utils.sh
  config/syslog_tls.crt.erb: config/syslog_tls.crt
  config/syslog_tls.key.erb: config/syslog_tls.key
  config/syslog_to_redis.conf.erb: config/syslog_to_redis.conf
properties:
  logstash.metadata_level:
    description: "Whether to include additional metadata throughout the event lifecycle. NONE = disabled, DEBUG = fully enabled"
    default: "NONE"

  logstash_ingestor.debug:
    description: Debug level logging
    default: false

  logstash_ingestor.syslog.port: 
    description: Port to listen for syslog messages
    default: 5514

  logstash_ingestor.syslog_tls.port: 
    description: Port to listen for syslog-TLS messages (omit to disable) 
  logstash_ingestor.syslog_tls.ssl_cert:
    description: Syslog-TLS SSL certificate (file contents, not a path) - required if logstash_ingestor.syslog_tls.port set
  logstash_ingestor.syslog_tls.ssl_key:
    description: Syslog-TLS SSL key (file contents, not a path) - required if logstash_ingestor.syslog_tls.port set
  logstash_ingestor.syslog_tls.jdk_tls_client_protocols:
    description: Allowed TLS protocols passed to jdk.tls.client.protocols and https.protocols settings.  Defaults to TLSv1,TLSv1.1,TLSv1.2.  Set to SSLv3,TLSv1,TLSv1.1,TLSv1.2 to enable (POODLE vulnerable) SSLv3 connections from legacy syslog clients
    default: "TLSv1,TLSv1.1,TLSv1.2"

  redis.host: 
    description: Redis host of queue
  redis.port: 
    description: Redis port of queue
    default: 6379
  redis.key: 
    description: Name of queue to pull messages from
    default: logstash

  archiver.enabled:
    default: false