Skip to content

Pluggable modules guide:

SC4S Lite pluggable modules are predefined modules that you can enable or disable by modifying your own config file. This yaml file contains a list of add-ons. See the example and list of available pluggable modules in (config.yaml reference file) for more information. Once you update own config.yaml you need mount it to the docker container and override /etc/syslog-ng/config.yaml.

Install SC4S Lite using docker-compose:

The installation process is identical to the installation process for docker-compose for SC4S with the following modifications.

  • Use the SC4S Lite image instead of the SC4S image:
image: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
  • Mount your config.yaml file with your add-ons to /etc/syslog-ng/config.yaml:
volumes:
    - /path/to/your/config.yaml:/etc/syslog-ng/config.yaml

Kubernetes:

The installation process is identical to the installation process for Kubernetes for SC4S with the following modifications:

  • Use the SC4S Lite image instead of SC4S in values.yaml:
image:
  repository: ghcr.io/splunk/splunk-connect-for-syslog/container3lite
  • Mount config. Add addons section inside sc4s at values.yaml:
sc4s:
    addons:
        config.yaml: |-
            ---
            addons:
                - cisco
                - paloalto
                - dell