vector.yaml

#                                    __   __  __
#                                    \ \ / / / /
#                                     \ V / / /
#                                      \_/  \/
#
#                                    V E C T O R
#                                   Configuration
#
# ------------------------------------------------------------------------------
# Website: https://vector.dev
# Docs: https://vector.dev/docs
# Chat: https://chat.vector.dev
# ------------------------------------------------------------------------------

# Change this to use a non-default directory for Vector data storage:
# data_dir: "/var/lib/vector"

# Random Syslog-formatted logs
sources:
  docker_logs:
    type: "docker_logs"

# See the Vector Remap Language reference for more info: https://vrl.dev
transforms:
  parse_docker:
    type: remap
    inputs: ["docker_logs"]
    source: |
      .message = parse_json(.message) ?? .message

      if is_object(.message) && (is_null(.message.message) || .message.message == "") {
        .message.message = "access"
      }

# Print parsed logs to stdout
sinks:
  # print:
  #   type: "console"
  #   inputs: ["parse_docker"]
  #   encoding:
  #     codec: "json"
  #     json:
  #       pretty: true

  vlogs:
    type: http
    inputs:
      - parse_docker
    uri: ${VLOGS_URI}
    encoding:
      codec: json
    framing:
      method: newline_delimited
    compression: gzip
    healthcheck:
      enabled: false
    request:
      headers:
        AccountID: "0"
        ProjectID: "0"
        VL-Stream-Fields: container_name
        VL-Msg-Field: message.message
        VL-Time-Field: timestamp
        VL-Extra-Fields: cluster=pc-proxy
# Vector's GraphQL API (disabled by default)
# Uncomment to try it out with the `vector top` command or
# in your browser at http://localhost:8686
# api:
#   enabled: true
#   address: "127.0.0.1:8686"