syslog日志通过vector写入clickhouse

[sinks.mw_source_id]
type = "syslog"
address = "ip:port"
mode = "tcp"
path = "/path/to/socket" # 实际地址根据系统改变

[transform.my_remap]
type= "remap"
drop_on_abort = true # 删除在处理过程中手动中止的任何事件
inputs = ["mw_source_id"]
source = '''
  . = parse_syslog!(.message)
'''

[sinks.to_clickhouse]
type = "clickhouse"
inputs = ["my_remap"]
compression = 'gzip"
endpoint = "http://ip:8123"
database = "databases"
table = "table"
auth.strategy = "basic"
auth.user = "user"
auth.password = "123455"
skip_unknown_fields = true
encoding.timestamp_format = "unix"