graylog_gelf_udp

Use case

Send each result as a GELF message over UDP to Graylog - lower overhead than HTTP, no delivery confirmation (UDP; a dead server is only detected on the next TCP-based output, if any).

Configuration

outputs:
  - name: graylog1
    type: graylog_gelf_udp
    host: graylog.example.com   # default localhost
    port: 12201                  # default 12201

Output

One UDP datagram per result (no bulk mode), GELF-mandatory fields (version, host, short_message) plus the same identity/CheckItem fields as the other metrology outputs: source, key, group, env, node, module, check, message, one field per CheckItem, state, severity.

A per-call circuit breaker skips the rest of the batch once one send fails outright, rather than retrying a socket write that already failed once.

Example

cmt --report --output graylog1 --debug

See also graylog_http_gelf for the HTTP/POST variant of the same GELF message shape.