Collects from local files using a glob pattern (so single file, directory, recursive, etc), windows event logs, JournalD, system logs and exec.

Ships all existing events in the file

Tails for new events in the file

handles single and multi line events

@collect.* metadata attached to the events including unique collector ID, hostname, @collect.timestamp etc

Buffers in memory

Sends data to Humio instance based on ingest token or environment variable

Offers a sub-second ingest lag between a line being written and sent to Humio (configurable)

Offers Network compression which defaults to ON

Supports HTTP(S) proxies

Supports reading from gzip and bzip2 compressed files by default. Note that the log collector has no notion of binary data so if a file.tar.gz is encountered the binary tar data will be shipped.