Tcp Input

TCP accepts plain, unencrypted, unauthenticated messages. It is compatible with most syslog daemons and other log collectors.

With a dedicated thread/parser for each connection (recommended for optimal performance, using less persistent connections than the available number of cores):

[input]
type = "tcp"
listen = "127.0.0.1:514"

With a fixed number of threads, using coroutines (recommended if many persistent connections have to be processed on a limited number of cores):

[input]
type = "tcp_co"
listen = "127.0.0.1:514"

Optional properties:

• timeout = <seconds>: automatically close idle connections after the specified number of seconds. ignored by the tcp_co implementation.
• tcp_threads = <number>: the number of threads to use. only for the tcp_co implementation`.
• framing = "<splitter>" (defaults to line): indicates how messages are split.