Event Stream
ENTERPRISE: Built-in integrations are available for Sensu Enterprise
users only.
Overview
The event stream integrations sends all Sensu events to a remote TCP
socket for complex event processing (or “stream processing”) and/or
long-term storage.
Configuration
Example(s)
The following is an example configuration for the event_stream enterprise
event handler (integration).
{
"event_stream": {
"host": "127.0.0.1",
"port": 3000,
"filter_metrics": true,
"filter_ok_keepalives": true,
"ring_buffer_size": 1500
}
}
Integration specification
event_stream attributes
| host |
|
| description |
The remote host address. |
| required |
false |
| type |
String |
| default |
127.0.0.1 |
| example |
"host": "moogserver-01.company.com"
|
| port |
|
| description |
The remote TCP port. |
| required |
false |
| type |
Integer |
| default |
3000 |
| example |
|
| filter_metrics |
|
| description |
If events with a type of metric are relayed to the remote socket. |
| required |
false |
| type |
Boolean |
| default |
false |
| example |
|
| filter_ok_keepalives |
|
| description |
If OK keepalive events are relayed to the remote socket. |
| required |
false |
| type |
Boolean |
| default |
false |
| example |
"filter_ok_keepalives": true
|
| ring_buffer_size |
|
| description |
By default, the event stream integration uses a data stream buffer to protect Sensu Enterprise from reaching an out-of-memory state. The ring_buffer_size attribute sets the limit for writes to the buffer. In the event of a connection interruption, the buffer begins discarding older data once it reaches the limit. Once the connection is re-established, the event stream sends the remaining data in the buffer. To disable the buffer, set ring_buffer_size to nil. |
| required |
false |
| type |
Integer |
| default |
1000 |
| example |
|