l24 import

l24 import imports static log files into logging24. This is the current home of the older importer-style workflow.

Usage

l24 import [options]  

Quick examples

l24 import -P "syslog" --structured /var/log/syslog env://L24_WRITE_TOKEN
l24 import -j --no-progress /var/log/archive.json.gz file://secret.token
l24 import -n --guess-encoding -P "syslog" /var/log/mystery.log env://L24_WRITE_TOKEN

General options

-n , --dry-run Parse without sending data.
--backend Destination backend, repeatable. Default: ingest.logging24.com:9000 .
--require-ack Require remote acknowledgment.
-b , --max-buffer-size Maximum output buffer size. Default: 4M .
-X , --no-persist Do not persist import progress to disk.
--state-file Specify the persistence filename.
-f , --force Skip sanity checks.

Input options

-P , --parser Force a specific parser.
-j , --json Treat input as a JSON array.
-z , --timezone Force timezone for timestamps. Default: UTC .
-S , --strict-timeorder Skip any lines with non-monotonic timestamps.
-E , --encoding Specify encoding manually.
--guess-encoding Auto-detect file encoding.

Output options

-s , --structured Convert to structured format.
--ts-extrapolation If timestamp parsing fails, increment from the last parsed timestamp.
--no-progress Do not show import progress updates.

Input file notes

supports plain files and common archive formats including .zip , .gz , .tar , .tar.gz , and .tgz .

Timestamp extrapolation

With --ts-extrapolation , lines without a parsable timestamp are assigned timestamps in 1 microsecond increments from the last successfully parsed line. This preserves visible order for structures such as stack traces.

Related links