[sources.varnish_logs] type = "file" include = ["/var/log/varnish/varnishncsa.log"] read_from = "end" [transforms.parse_varnish] type = "remap" inputs = ["varnish_logs"] source = ''' . = parse_json!(.message) ''' [sinks.console] type = "console" inputs = ["parse_varnish"] target = "stdout" [sinks.console.encoding] codec = "json" [sinks.hydrolix] type = "http" inputs = ["parse_varnish"] uri = "HYDROLIX INGEST URL" method = "post" compression = "gzip" [sinks.hydrolix.encoding] codec = "json" [sinks.hydrolix.batch] max_bytes = 10485760 max_events = 1000000 timeout_secs = 30 [sinks.hydrolix.request] concurrency = "adaptive" [sinks.hydrolix.request.headers] Authorization = "YOUR BEARER HEADER" Content-Type = "application/json"