lbcli create logs targets

Creates a new log forwarding target.

Synopsis

Creates a new log forwarding target.

Use --type=loki for a Loki-compatible push endpoint, or --type=rsyslog for a remote syslog server.

Loki flags:

--url: Loki push URL; e.g., https://loki.example.com:3100 (required; must be a valid URL with scheme and host).

--loki-username: Basic-auth username (optional).

--loki-password: Basic-auth password (optional).

--loki-tls: Name of a TLS bundle for mutual TLS (optional).

rsyslog flags:

--endpoint: rsyslog server address as host:port or ip:port; e.g., siem.example.com:514 (required; IPv6 addresses must be in [::1]:port form).

--rsyslog-port: TCP port — Note that port must be included in --endpoint; this flag is ignored.

--rsyslog-timeout: Dial timeout; e.g., 5s (optional).

--rsyslog-debug: Enable verbose rsyslog debug logging.

--rsyslog-tls: Name of a TLS bundle for TLS transport (optional).

xxxxxxxxxx

lbcli create logs targets [flags]

Examples

xxxxxxxxxx

# Create a Loki target with basic auth

lbcli -J $JWT create logs targets \

  --name=loki-prod \

  --type=loki \

  --url=https://loki.example.com:3100 \

  --loki-username=admin \

  --loki-password=secret \

  --enabled

# Create a Loki target with mutual TLS (no basic auth)

lbcli -J $JWT create logs targets \

  --name=loki-mtls \

  --type=loki \

  --url=https://loki.internal:3100 \

  --loki-tls=prod-loki-bundle \

  --enabled

# Create an rsyslog target over plain TCP

lbcli -J $JWT create logs targets \

  --name=rsyslog-siem \

  --type=rsyslog \

  --endpoint=siem.example.com:514 \

  --enabled

# Create an rsyslog target with TLS

lbcli -J $JWT create logs targets \

  --name=rsyslog-tls \

  --type=rsyslog \

  --endpoint=siem.example.com:6514 \

  --rsyslog-tls=rsyslog-bundle \

  --enabled