Send Aiven logs to Logtail#

Logtail is a logging service with solid database backing and a cool SQL query interface. You can use the Aiven Remote syslog integration to send your logs to Logtail. This article will show you how to set this up.

  1. Set up an Rsyslog source on Logtail. Choose Connect source, give your source a Name, and select “Rsyslog” as the Platform.

  2. Copy the Source token of your new source; you will need this shortly to configure the Aiven side of the integration.

  3. Create the service integration on Aiven. Choose Integration endpoints in the web console, click on Syslog and choose Add new endpoint.

  4. Configure the new endpoint:

    • Set an Endpoint name for this integration

    • Server: in.logtail.com

    • Port: 6514

    • Format: custom

    • Now replace YOUR_LOGTAIL_SOURCE_TOKEN in the log template below with the token you copied in step 2, and paste into the Log template field:

      <%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [logtail@11993 source_token="YOUR_LOGTAIL_SOURCE_TOKEN"] %msg%

  5. Add your new logs integration to any of your Aiven services (more information in the Rsyslog article)

  6. Check the Live tail page on Logtail to see the logs coming in.

Create the Logtail service integration endpoint with Aiven client#

If you would rather use the CLI, you can use the following command to create the service integration endpoint. Replace the placeholder with your token:

avn service integration-endpoint-create --project your-project \
-d logtail -t rsyslog \
-c server=in.logtail.com -c port=6514 \
-c tls=true -c format=custom \
-c logline='<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% [logtail@11993 source_token="TOKEN-FROM-LOGTAIL"] %msg%'

This replaces steps 3 and 4 above.