---
title: Charmhub | Deploy Bigdata Dev Realtime Syslog Analytics using Charmhub - The
  Open Operator Collection
description: Deploy the latest version of Bigdata Dev Realtime Syslog Analytics on
  any cloud.
url: https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/rsyslog-forwarder-ha
---

##### We've discontinued the registration of new Bundles

New Bundle registrations are no longer accepted. Existing bundles remain functional. We recommend using the Juju Terraform Provider for new deployments.

[Learn more](https://discourse.charmhub.io/t/discontinuing-new-charmhub-bundle-registrations/15344)

# Bigdata Dev Realtime Syslog Analytics

[Juju Big Data Development](https://charmhub.io/publisher/bigdata-dev "View all packages from Juju Big Data Development")
| bundle

* [Juju Big Data Development](https://charmhub.io/publisher/bigdata-dev "View all packages from Juju Big Data Development")
  | bundle

Platform:

stable 29

```
juju deploy bigdata-dev-realtime-syslog-analytics
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [Apache Flume Hdfs](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-flume-hdfs)
* [Apache Flume Syslog](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-flume-syslog)
* [Apache Hadoop Namenode](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-hadoop-namenode)
* [Apache Hadoop Plugin](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-hadoop-plugin)
* [Apache Hadoop Resourcemanager](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-hadoop-resourcemanager)
* [Rsyslog Forwarder Ha](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/rsyslog-forwarder-ha)
* [Apache Hadoop Slave](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-hadoop-slave)
* [Apache Spark](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-spark)
* [Apache Zeppelin](https://charmhub.io/bigdata-dev-realtime-syslog-analytics/configurations/apache-zeppelin)

[Learn about configurations >](https://juju.is/docs/juju/configuration#heading--application-configuration)

* cert | string

  TLS certificate in base64 format to access rsyslog server
* forward\_hosts | string

  A comma-separated list of key=value representing hostname and ip address of servers to forward all logs to as in hostname1=host\_ip1:port1,hostname2=host\_ip2:port2,hostname3=host\_ip3:port3 With no port specifed 514 will be used.
* log-locally | boolean

  Default: True

  Should logs be written locally as well as forwarded?
* message-filter | string

  Default: \*.\*

  Select messages to forward, in the form of <facility>.<severity> By default all messages are forwarded (\*.\*)
* nagios\_context | string

  Default: juju

  Used by the nrpe-external-master subordinate charm. A string that will be prepended to instance name to set the host name in nagios. So for instance the hostname would be something like:
  juju-rsyslog-forwarder-ha-0
  If you're running multiple environments with the same services in them this allows you to differentiate between them.
* nagios\_servicegroups | string

  A comma-separated list of nagios servicegroups. If left empty, the nagios\_context will be used as the servicegroup
* protocol | string

  Default: udp

  transport protocol to use, currently supported options: udp, relp, tcp
* replication-mode | string

  Default: fanout

  Possible options are 'fanout' or 'failover' fanout replicates the log messages over all the defined syslog relations, failover replicates the log messages just if the previous server is down. Failover always uses tcp for the protocol.
* watch-files | string

  Default: /var/log/dpkg.log /var/log/apt/history.log

  A space separated list of files to follow with rsyslog imfile and forward to the aggregator. If set to empty string no files will be watched with imfile.