Cloudfoundry logs via syslog drain with https schema

[yasusuzu]

Team,

Just wondering if we could send application and/or cloudfoundry logs via syslog-drain with https schema.

In this document, it says as follows. It looks like https schema is supported.

----

Cloud Foundry uses the syslog URL to route messages to the service. The syslog URL has a scheme of syslog, syslog-tls, or https, and can include a port number. For example:

syslog://logs.example.com:1234

---

I'm now trying to ingest those logs via syslog-drain with https schema but the endpoint I want to ingest logs to requires the specific HTTP headers with api token and data format like this.

'Content-Type': 'application/json; charset=utf-8'
'Authorization': 'Api-Token <MY SECRET TOKEN>'

 How do I set those headers in syslog-drain configuration? I just add them into credential field as JSON format in the following way however it looks like it doesn't work well.

{
    "Authorization": "Api-Token <MY SECRET TOKEN>",
    "Content-Type": "application/json; charset=utf-8"
}

 How do I configure http headers when we use syslog-drain with https schema?

Best regards,

Yas

[ZPascal]

Hi @yasusuzu, we do not support the token transfer as header from the community side. If you would like to have this function, it's necessary to submit a feature request inside the Cloud Foundry community.

Regards,

Pascal

[ZPascal · Accepted solution]

Hi @yasusuzu,

we do not support the token transfer as header from the community side. If your connected service supports the token transfer via url e.g. https://o-auth:<token>@test.com or https://<token>@test.com, it might be possible.

We also offer mTLS as an authorisation option.

Regards,

Pascal

[yasusuzu · Accepted solution]

Hi @ZPascal, thanks for leaving your comments here. I just figured out what a token format on SAP BTP CF runtime is supported. Anyway, I'm now able to ingest both CF logs and Application logs into Dynatrace platform via syslog-drain. Dynatrace is able to accept a naive syslog format. I don't need to use syslog-tls anymore 🙂

[ZPascal · Accepted solution]

Hi @yasusuzu, I recommending to use a TLS connection between your endpoints to be sure that the logs are forwarded encrypted.