MessageLoggingPolicy integration with Logstash

[dveerendra004]

When using a MessageLogging policy to send in syslog messages to logstash, the message does not get logged at all.

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<MessageLogging  async="false" continueOnError="false" enabled="true" name="Message-Logging-1">
    <DisplayName>Message Logging</DisplayName>
    <Syslog>
        <Message>{system.time.year}-{system.time.month}-{system.time.day}:{system.time.hour}-{system.time.minute}-{system.time.second}.{system.time.millisecond} {apiproxy.name} {request.header.x-requestor-app} {request.header.x-realm} [{request.header.x-requestor-type}|{request.header.x-requestor}] </Message>
        <Host>logstash.xxxx.com</Host>
        <Port>5140</Port>
    </Syslog>
</MessageLogging>

[cmbrown]

For MessageLogging policy you need to use UDP port 514. Also you may need a specific data element within your message itself based upon the 3rd parties "rules" for collection. You would need to look at logstash requirement. Let me know how you make out.

[#3]

Looks like Protocol is not supported. But the documentation says the otherway.

[jonesfloyd]

Interesting. The Protocol element in Syslog was supposedly available as of cloud release 140723 and OPDK release 4.14.07.00. If you leave Protocol off, the default should be UDP.

I just tried deploying the following Message Logging policy to my environment (through the UI and importing as a proxy bundle), and I got no validation errors.

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<MessageLogging  async="false" continueOnError="false" enabled="true" name="Message-Logging-1">
    <DisplayName>Message Logging 1</DisplayName>
  <Syslog>
    <Message>[3f509b58 tag="{organization.name}.{apiproxy.name}.{environment.name}"] Weather request for WOEID {request.queryparam.w}.</Message>
    <Host>localhost</Host>
    <Port>514</Port>
    <Protocol>UDP</Protocol>
  </Syslog>
</MessageLogging>

Veerendra, have you tried it with port 514? (You can just leave the protocol element off for a UDP default.)