Fluentd
Search…
Data Analytics with Treasure Data
This article explains how to use Treasure Data with Fluentd to aggregate semi-structured logs into Treasure Data (TD), which offers Cloud Data Service.
Background
​Fluentd is an advanced open-source log collector originally developed at Treasure Data, Inc. Fluentd is specifically designed to solve the big-data log collection problem.
​Treasure Data provides Cloud Data Service, which Fluentd users can use to easily store and analyze data on the cloud. Fluentd is designed to flexibly connect with many systems via plugins, but Treasure Data should be your top choice if you don't want to spend engineering resources maintaining your backend infrastructure.
Architecture
The figure below shows the high-level architecture:
TreasureData Architecture
Install
For simplicity, this article will describe how to set up a one-node configuration. Please install the following software on the same node:
The TD Output plugin is included in Fluentd's deb/rpm package (
td-agent) by default. If you want to use RubyGems to install the plugin, please use gem install fluent-plugin-td.Sign Up
1
$ td account -f
2
Enter your Treasure Data credentials.
3
Email: [email protected]
4
Password (typing will be hidden):
5
$ td apikey:show
6
kdfasklj218dsakfdas0983120
Copied!
Fluentd Configuration
Let's start configuring Fluentd. If you used the deb/rpm package, Fluentd's config file is located at
/etc/td-agent/td-agent.conf. Otherwise, it is located at /etc/fluentd/fluentd.conf.HTTP Input
For the input source, we will set up Fluentd to accept records from HTTP. The Fluentd configuration file should look like this:
1
<source>
2
@type http
3
port 8888
4
</source>
Copied!
Treasure Data Output
The output destination will be Treasure Data. The output configuration should look like this:
1
<match td.*.*>
2
@type tdlog
3
apikey YOUR_API_KEY_IS_HERE
4
auto_create_table
5
use_ssl true
6
<buffer>
7
@type file
8
path /var/log/td-agent/buffer/td
9
</buffer>
10
</match>
Copied!
The match section specifies the regexp used to look for matching tags. If a matching tag is found in a log, then the config inside
<match>...</match> is used (i.e. the log is routed according to the config inside).Test
To test the configuration, just post the JSON to Fluentd. Sending a
USR1 signal flushes Fluentd's buffer into TD:1
$ curl -X POST -d 'json={"action":"login","user":2}' \
2
http://localhost:8888/td.testdb.www_access
3
$ kill -USR1 `cat /var/run/td-agent/td-agent.pid`
Copied!
Next, please use the
td tables command. If the count is not zero, the data was imported successfully.1
$ td tables
2
+----------+------------+------+-------+--------+
3
| Database | Table | Type | Count | Schema |
4
+----------+------------+------+-------+--------+
5
| testdb | www_access | log | 1 | |
6
+----------+------------+------+-------+--------+
Copied!
You can now issues queries against the imported data:
1
$ td query -w -d testdb \
2
"SELECT COUNT(1) AS cnt FROM www_access"
3
queued...
4
started at 2012-04-10T23:44:41Z
5
2012-04-10 23:43:12,692 Stage-1 map = 0%, reduce = 0%
6
2012-04-10 23:43:18,766 Stage-1 map = 100%, reduce = 0%
7
2012-04-10 23:43:32,973 Stage-1 map = 100%, reduce = 100%
8
Status : success
9
Result :
10
+-----+
11
| cnt |
12
+-----+
13
| 1 |
14
+-----+
Copied!
It is not advisable to send sensitive user information to the cloud. To assist with this need,
out_tdlog comes with some anonymization systems. For more details, see Treasure Data plugin.Conclusion
Fluentd + Treasure Data gives you a data collection and analysis system in days, not months. Treasure Data is a useful solution if you do not want to spend engineering resources maintaining the backend storage and analytics infrastructure.
Learn More
If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is an open-source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.
Last modified 1yr ago