Socket sink support for TTL?

[pkruk]

Hi,

I'm using vector to deliver logs to logstash with using a socket sink :)

    sinks:
      logstash:
        type: socket
        inputs: ["parse_json"]
        mode: "tcp"
        address: "xxxxxxx:5045"
        encoding:
          codec: json

But on logstash we observed that traffic is not distributed evenly. It's looks like one ip is resolved from a host and all is sent to this one endpoint. Rigth now we observed that one node of our logstash is receiving a traffic and the rest is on zero. There is any option to set a TTL in socket sink?

We're using right now vector version: 0.42.0

[pront]

But on logstash we observed that traffic is not distributed evenly. It's looks like one ip is resolved from a host and all is sent to this one endpoint.

Hi, there's no notion of load balancing baked in the socket sink. It will establish a connection to the specified endpoint and that's it.

There is any option to set a TTL in socket sink?

https://vector.dev/docs/reference/configuration/sinks/socket/#keepalive.time_secs

[pkruk]

I see, thank for answer :) ! our case we just migrated logtash to http-sink with logstash behind Application Load Balancer and that's helps us a lot :)

[pront]

Nice 👍 Thank you for sharing your solution.