victoriametrics.com

On a client site which should already have journald please install additionally systemd-journal-upload and edit /etc/systemd/journal-upload.conf and set URL to VictoriaLogs endpoint:

[Upload]
URL=http://localhost:9428/insert/journald

Substitute the localhost:9428 address inside endpoints section with the real TCP address of VictoriaLogs.

Since neither HTTP query arguments nor HTTP headers are configurable on systemd-journal-upload, stream fields and other params can be configured on VictoriaLogs using command-line flags:

  • journald.streamFields - configures stream fields for ingested data. Here’s a list of supported Journald fields
  • journald.ignoreFields - configures Journald fields, that should be ignored.
  • journald.tenantID - configures TenantID for ingested data.
  • journald.timeField - configures time field for ingested data.

See also: