Get CoreOS Logs into ELK in 5 Minutes

blog.sematext.com

2 pointsseti3212 comments

interesting, but Q: "journalctl -o short -f | ncat --ssl logsene-receiver-syslog.sematext.com 10514", what happens after journalctl dies/restarts?

a bit of shell acrobatic in fleet unit file :)