Heka Systemd journald Input

1. Sample Configuration

filename        = "journald.lua"
ticker_interval = 1 -- poll once a second after hitting EOF

seek = "tail" -- default (tail|head) location to start if there is no checkpoint

-- Heka message table containing the default header values to use, if they are
-- not populated by the decoder. If 'Fields' is specified it should be in the
-- hashed based format see:  http://mozilla-services.github.io/lua_sandbox/heka/message.html
-- This input will always default the Type header to the Kafka topic name.
-- Default:
-- default_headers = nil

-- printf_messages = -- see: https://mozilla-services.github.io/lua_sandbox_extensions/lpeg/modules/lpeg/printf.html

-- Specifies a hash keyed by _TRANSPORT. Each transport specifies its own sub decoder hash configuration keyed
-- by SYSLOG_IDENTIFIER.
-- see: https://mozilla-services.github.io/lua_sandbox_extensions/lpeg/io_modules/lpeg/sub_decoder_util.html
-- Default:
decoders = nil

-- example to perform additional parsing on the syslog/sshd message contents
--decoders = {
--    syslog  = {
--        printf_messages = {
--            "lpeg.openssh_portable",
--        },
--        sub_decoders = {
--            sshd =  {
--            "Accepted publickey for foobar from 192.168.1.1 port 4567 ssh2",
--            },
--            filterlog = "lpeg.bsd.filterlog",
--        }
--    },
--    --audit   = {},
--    --driver  = {},
--    --journal = {},
--    --stdout  = {},
--    --kernel  = {},
--}

source code: journald.lua