# logcorrelator configuration file
# Format: YAML

# Logging configuration
log:
  level: INFO  # DEBUG, INFO, WARN, ERROR

inputs:
  unix_sockets:
    - name: http
      path: /var/run/logcorrelator/http.socket
      format: json
      socket_permissions: "0660"  # owner + group read/write
    - name: network
      path: /var/run/logcorrelator/network.socket
      format: json
      socket_permissions: "0660"

outputs:
  file:
    path: /var/log/logcorrelator/correlated.log

  clickhouse:
    dsn: clickhouse://user:pass@localhost:9000/db
    table: correlated_logs_http_network

  stdout: false

correlation:
  time_window_s: 1
  emit_orphans: true  # http toujours émis, network jamais seul