Working with pluggable modules¶
SC4S Lite pluggable modules are predefined modules that you can enable or disable by modifying your config.yaml
file. This file contains a list of add-ons. See the example and list of available pluggable modules in (config.yaml reference file) for more information. Once you update config.yaml
, you mount it to the Docker container and override /etc/syslog-ng/config.yaml
.
Install SC4S Lite using Docker Compose¶
The installation process is identical to the installation process for Docker Compose for SC4S with the following modifications.
-
Use the SC4S Lite image instead of the SC4S image:
image: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
-
Mount your
config.yaml
file with your add-ons to/etc/syslog-ng/config.yaml
:
volumes:
- /path/to/your/config.yaml:/etc/syslog-ng/config.yaml
Kubernetes:¶
The installation process is identical to the installation process for Kubernetes for SC4S with the following modifications:
-
Use the SC4S Lite image instead of SC4S in
values.yaml
:image: repository: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
-
Mount
config.yaml
. Add anaddons
section insidesc4s
invalues.yaml
:
sc4s:
addons:
config.yaml: |-
---
addons:
- cisco
- paloalto
- dell