New source: Apple macOS OSLog

[artizirk]

A note for the community

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Use Cases

It would be great to have native macOS OSLog source support in Vector as wrapping log command is very cumbersome due to sandboxing.

Attempted Solutions

On first glance it looks like you should be able to use exec source with log command but due to Apple sandboxing it doesn't work. Workaround is to have a separate script with enough privileges to write the system log to a file and then use file source to consume it in vector.

Proposal

There is some prior art available in syslog-ng darwin-oslog plugin and a Rust Library

References

No response

Version

No response

[jszwedko]

Thanks for the request @artizirk !