Skip to content

SyslogUdpBolt

Use the UDP bolt to send traffic towards a UDP server. The UDP bolts is configured just like the syslog (tcp) bolt. However it has a much simpler configuration because it does not support any acknowledgement option, nor SSL.

Info

it makes no sense to use a UDP bolt with multi-group or load-balancing strategies. These relies on TCP connection closing to switchover from one peer to another. However the syslog bolt does support multi-stream configuration, should you need to direct logs received on one Storm stream to a given UDP destination.

Here is an example configuration:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
{
     "type" : "syslog_udp_bolt",
     "bolt_settings" : {
         "destination" : [
           {
               "host" : "target.ip.address",
               "port" : 9999,
           }
         ]
     },
     "storm_settings" : {
       "executors": 1,
       "component" : "syslog_udp_spout",
       "subscribe" : [ 
           { 
             "component" : "the.spout.or.bolt.you.subscribe.from", 
             "stream" : "logs", 
             "grouping": "localOrShuffle" 
           } 
         ]
     }
 }

Per stream destinations are also supported, refer to Per Stream Destinations.