Help me write a configuration for using vectors to ssh to the server and retrieve log files from the server.

[fam11251]

Help me write a configuration for using vectors to ssh to the server and retrieve log files from the server.
details

• Set the source to ssh to the destination server.
• Set the path to the log file on the destination machine.
• Set the sink to loki.

[pront]

You can run ssh through the exec source and send its output to Loki:

sources:
  remote_logs:
    type: exec
    mode: streaming
    include_stderr: false
    command:
      - ssh
      - -o
      - BatchMode=yes
      - -o
      - StrictHostKeyChecking=yes
      - logs@example.com
      - tail -n 0 -F /var/log/app.log
    streaming:
      respawn_on_exit: true
      respawn_interval_secs: 5

sinks:
  loki:
    type: loki
    inputs: [remote_logs]
    endpoint: http://loki:3100
    encoding:
      codec: text
    labels:
      job: remote_app

Replace the SSH destination, log path, and Loki endpoint. The account running Vector needs working SSH key authentication and a trusted host key in known_hosts.

This tails new lines only. It does not keep file checkpoints, so lines written while disconnected can be missed when the command restarts.