Pluggable modules guide:¶
Pluggable modules it’s predefined modules, that you can only enable/disable by changing config file. After updating this config file with enabled addons you need to restart sc4s.
This config file it’s a yaml file with list of addons (whole list of addons here):
---
addons:
- cisco
- paloalto
- dell
You don’t need to rebuild docker image, you need mount custom config into /etc/syslog-ng/config.yaml.
docker-compose:¶
-
Read guide how to use docker-compose for SC4S
-
Use SC4S Lite image instead of SC4S in docker-compose.yaml
image: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
- Mount config file with addons to /etc/syslog-ng/config.yaml:
volumes:
- /path/to/your/config.yaml:/etc/syslog-ng/config.yaml
k8s:¶
-
Read guide how to use k8s for SC4S
-
Use SC4S Lite image instead of SC4S in values.yaml:
image:
repository: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
- Mount config file. Add addons section on sc4s section of values.yaml:
sc4s:
addons:
config.yaml: |-
---
addons:
- cisco
- paloalto
- dell