interleaved

Interleave request and response data in bulk error-file output.

This parameter applies to omelasticsearch: Elasticsearch Output Module.

Name:

interleaved

Scope:

action

Type:

boolean

Default:

off

Required?:

no

Introduced:

at least 8.x, possibly earlier

Description

When enabled, omelasticsearch stores request and response data together for each item written to the configured errorFile. This makes it easier to correlate a bulk request item with the Elasticsearch item response that caused the error file entry.

The option can be combined with errorOnly to write only failed bulk items while still keeping each failed request next to its response.

Action usage

action(type="omelasticsearch" errorFile="..." interleaved="on")

See also

See also omelasticsearch: Elasticsearch Output Module, errorFile, and errorOnly.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.