Log Search - Log Feeder:

Log Feeder is a component of the Log Search service that reads logs, parses them and stores them in Apache Solr for the purpose of later analysis.

Compilation

mvn clean compile package

Deploy

Copy to remote

copy target/logsearch-logfeeder.tgz to host machine

Setup environment

mkdir /opt/logfeeder
cd /opt/logfeeder
tar xfz ~/logsearch-logfeeder.tar.gz 

Input Configuration

The configuration for the log feeder contains

• description of the log files
• description of the filters that parse the data of the log entries
• description of the mappers that modify the parsed fields

The element description can be found here

All these data are stored in json files, which should be named in the directory /etc/ambari-logsearch-logfeeder/conf, and the name of the files should be input.config-<service_name>.json