{ config, lib, pkgs, ... }: with lib; let cfg = config.services.logstash; in { ###### interface options = { services.logstash = { enable = mkOption { type = types.bool; default = false; description = "Enable logstash."; }; enableWeb = mkOption { type = types.bool; default = false; description = "Enable the logstash web interface."; }; inputConfig = mkOption { type = types.lines; default = ''stdin { type => "example" }''; description = "Logstash input configuration."; example = '' # Read from journal pipe { command => "${pkgs.systemd}/bin/journalctl -f -o json" type => "syslog" codec => json {} } ''; }; filterConfig = mkOption { type = types.lines; default = ''noop {}''; description = "logstash filter configuration."; example = '' if [type] == "syslog" { # Keep only relevant systemd fields # http://www.freedesktop.org/software/systemd/man/systemd.journal-fields.html prune { whitelist_names => [ "type", "@timestamp", "@version", "MESSAGE", "PRIORITY", "SYSLOG_FACILITY", ] } } ''; }; outputConfig = mkOption { type = types.lines; default = ''stdout { debug => true debug_format => "json"}''; description = "Logstash output configuration."; example = '' redis { host => "localhost" data_type => "list" key => "logstash" codec => json } elasticsearch { embedded => true } ''; }; }; }; ###### implementation config = mkIf cfg.enable { systemd.services.logstash = with pkgs; { description = "Logstash Daemon"; wantedBy = [ "multi-user.target" ]; environment = { JAVA_HOME = jre; }; serviceConfig = { ExecStart = "${logstash}/bin/logstash agent -f ${writeText "logstash.conf" '' input { ${cfg.inputConfig} } filter { ${cfg.filterConfig} } output { ${cfg.outputConfig} } ''} ${optionalString cfg.enableWeb "-- web"}"; }; }; }; }