From fe208719467de9cc68fb60d04c31d3e72564881e Mon Sep 17 00:00:00 2001 From: Idriss Neumann Date: Tue, 2 Jan 2024 15:41:14 +0100 Subject: [PATCH] feat(quickwit_output): add quickwit config documentation --- docs/outputs/quickwit.md | 42 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 docs/outputs/quickwit.md diff --git a/docs/outputs/quickwit.md b/docs/outputs/quickwit.md new file mode 100644 index 0000000000..434584eebc --- /dev/null +++ b/docs/outputs/quickwit.md @@ -0,0 +1,42 @@ +# Quickwit + +- **Category**: Logs +- **Website**: https://quickwit.io/ + +## Table of content + +- [Quickwit](#quickwit) + - [Table of content](#table-of-content) + - [Configuration](#configuration) + - [Example of config.yaml](#example-of-configyaml) + +## Configuration + +| Setting | Env var | Default value | Description | +| ------------------------------- | ------------------------------- | ---------------- | ----------------------------------------------------------------------------------------------------------------------------------- | +| `quickwit.hosport` | `QUICKWIT_HOSTPORT` | | http://{domain or ip}:{port}, if not empty, Quickwit output is **enabled** | +| `quickwit.apiendpoint` | `QUICKWIT_APIENDPOINT` | `/api/v1` | API endpoint (containing the API version, overideable in case of quickwit behind a reverse proxy with URL rewriting) | +| `quickwit.index` | `QUICKWIT_INDEX` | `falco` | Index | +| `quickwit.version` | `QUICKWIT_VERSION` | `0.6` | Version of quickwit | +| `quickwit.customheaders` | `QUICKWIT_CUSTOMHEADERS` | | Custom headers to add in POST, useful for Authentication | +| `quickwit.mutualtls` | `QUICKWIT_MUTUALTLS` | `false` | Authenticate to the output with TLS, if true, checkcert flag will be ignored (server cert will always be checked) | +| `quickwit.checkcert` | `QUICKWIT_CHECKCERT` | `true` | Check if ssl certificate of the output is valid | +| `quickwit.minimumpriority` | `QUICK_MINIMUMPRIORITY` | `""` (= `debug`) | Minimum priority of event for using this output, order is `emergency,alert,critical,error,warning,notice,informational,debug or ""` | + +> **Note** +The Env var values override the settings from yaml file. + +## Example of config.yaml + +```yaml +quickwit: + # hostport: "" + # apiendpoint: "/api/v1" + # index: "falco" + # version: "0.6" + # customHeaders: + # key: value + # mutualtls: false + # checkcert: true + # minimumpriority: "" +```