lbcli create logs targets

Creates a new log forwarding target.

Creates a new log forwarding target.

Use --type=loki for a Loki-compatible push endpoint, or --type=rsyslog for a remote syslog server.

Loki flags:

--url: Loki push URL; e.g., https://loki.example.com:3100 (required; must be a valid URL with scheme and host).

--loki-username: Basic-auth username (optional).

--loki-password: Basic-auth password (optional).

--loki-tls: Name of a TLS bundle for mutual TLS (optional).

rsyslog flags:

--endpoint: rsyslog server address as host:port or ip:port; e.g., siem.example.com:514 (required; IPv6 addresses must be in [::1]:port form).

--rsyslog-port: TCP port — Note that port must be included in --endpoint; this flag is ignored.

--rsyslog-timeout: Dial timeout; e.g., 5s (optional).

--rsyslog-debug: Enable verbose rsyslog debug logging.

--rsyslog-tls: Name of a TLS bundle for TLS transport (optional).

lbcli create logs targets [flags]

Examples

# Create a Loki target with basic auth

lbcli -J $JWT create logs targets \

--name=loki-prod \

--type=loki \

--url=https://loki.example.com:3100 \

--loki-username=admin \

--loki-password=secret \

--enabled

# Create a Loki target with mutual TLS (no basic auth)

lbcli -J $JWT create logs targets \

--name=loki-mtls \

--type=loki \

--url=https://loki.internal:3100 \

--loki-tls=prod-loki-bundle \

--enabled

# Create an rsyslog target over plain TCP

lbcli -J $JWT create logs targets \

--name=rsyslog-siem \

--type=rsyslog \

--endpoint=siem.example.com:514 \

--enabled

# Create an rsyslog target with TLS

lbcli -J $JWT create logs targets \

--name=rsyslog-tls \

Flag	Short	Type	Default	Description
--help	-h	bool		Help for `targets`.
--enabled		bool	true	Enable this target immediately (default: true).
--endpoint		string		rsyslog server address as host:port or ip:port; e.g., siem.example.com:514 (required for type=rsyslog).
--loki-password		string		Loki basic-auth password.
--loki-tls		string		Name of a TLS bundle for Loki mutual TLS.
--loki-username		string		Loki basic-auth username.
--name		string		Name of the log target (required).
--rsyslog-debug		bool		Enable rsyslog debug mode.
--rsyslog-timeout		string		rsyslog dial timeout; e.g., 5s.
--rsyslog-tls		string		Name of a TLS bundle for rsyslog TLS transport.
--type		string		Target type: loki or rsyslog (required).
--url		string		Loki push URL including scheme, e.g., https://loki.example.com:3100 (required for type=loki).

Last updated on

Was this page helpful?