Sidecar Configuration Settings Reference

Graylog Sidecar uses a central configuration file to define how it connects to Graylog, manages collectors, and handles logging and runtime behavior. The Sidecar configuration file is located by default at /etc/graylog/sidecar/sidecar.yml. The settings described in this article help administrators customize Sidecar behavior to fit a wide range of deployment environments.

Communication and API Connections Properties

These properties govern how the Graylog Sidecar communicates with the Graylog server API. They ensure secure and authenticated connections and determine how the Sidecar interacts with the backend.

Parameter Default Value Description
server_url None Specifies the Graylog API endpoint URL. The value must end with /api/ to ensure proper communication between the Sidecar and the Graylog Server.
server_api_token None Defines the authentication token generated in Graylog. This token is required for the Sidecar to authenticate securely with the Graylog Server.
tls_skip_verify false Indicates whether TLS certificate validation should be skipped. This option should only be used in development or laboratory environments using self-signed certificates.

Sidecar Identity Properties

These properties define the unique identity of each Sidecar instance. Identity settings are essential for registration, monitoring, and management within Graylog.

Parameter Default Value Description
node_id file:/etc/graylog/sidecar/node-id Specifies the unique identifier assigned to the Sidecar. This ID is essential for successful registration and ongoing lifecycle management in the Graylog environment.
node_name hostname Specifies the name that appears in the Graylog web interface. This value typically defaults to the local system hostname.

Status Polling and Heartbeat Properties

These properties control how frequently the Sidecar updates Graylog about its status and collector health. These parameters help monitor performance and ensure accurate system state reporting.

Parameter Default Value Description
update_interval 10 Defines the polling interval, in seconds, used by the Sidecar to request new configuration data or updates from Graylog. Adjusting this value helps balance responsiveness against system load.
send_status 1 Indicates whether the Sidecar should send health status and collector metrics to Graylog. This should remain enabled unless troubleshooting performance or load-related issues.

Log File Visibility and Diagnostics Properties

These properties determine which log files are visible in the Graylog interface and how the Sidecar manages its own log output. Proper configuration supports effective troubleshooting and system transparency.

Parameter Default Value Description
list_log_files [ ] Specifies which log file paths should be displayed in the Graylog interface. Administrators can add directories such as /var/log to enhance visibility during troubleshooting.
log_path /var/log/graylog-sidecar Defines the directory where the Sidecar stores its own log files. This location is frequently used during debugging and issue tracebacks.
log_rotate_max_file_size 10MiB Specifies the maximum size a log file can reach before rotation occurs. Proper configuration prevents log files from consuming excessive disk space.
log_rotate_keep_files None Determines how many rotated log files are retained. Retaining an appropriate number helps preserve diagnostic history while managing disk space.

File Paths and Storage Properties

These properties specify where Sidecar stores operational data, including caches and rendered collector configurations. Adjust these paths when customizing file system layouts or storage devices.

Parameter Default Value Description
cache_path /var/cache/graylog-sidecar Identifies the directory where the Sidecar stores runtime cache data. This path can be relocated as needed for custom storage configurations.
collector_configuration_directory /var/lib/graylog-sidecar/generated Specifies the folder where the Sidecar writes fully rendered collector configurations before execution.

Execution and Collector Control Properties

These properties control which collectors the Sidecar is permitted to run and how it matches tags for selecting the correct configuration assignments. Proper configuration ensures that collectors operate securely and accurately.

Parameter Default Value Description
collector_binaries_accesslist (default collector paths) Specifies the list of collector binaries that the Sidecar is authorized to execute. Leaving this value empty disables execution control and permits all collectors.
Tags None Defines classification labels used to match the Sidecar with appropriate collector configurations. Tags such as linux, windows, or dns help organize and automate configuration assignment in complex deployments.

Further Reading

Explore the following additional resources and recommended readings to expand your knowledge on related topics: