Feature/baseconfig (#13)

This change implements the configuration framework allowing plug of filter modules for the primary deployment type
Fixes #12 
Fixes #11 
This change adds a filter for Palo Alto networks devices

.gitignore

@@ -306,3 +306,6 @@ tags
 /test-results/
 /.idea/workspace.xml
 /.idea/tasks.xml
+!/package/scripts/switch_transport.sh
+!/package/scripts/splunkmetrics.sh
+!/package/scripts/

docker-compose.yml

@@ -63,6 +63,11 @@ services:
       - SPLUNK_HEC_TOKEN
       - SPLUNK_PASSWORD
       - SPLUNK_START_ARGS
+      - SPLUNK_APPS_URL
+      - SPLUNKBASE_USERNAME
+      - SPLUNKBASE_PASSWORD
+    volumes:
+      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
 #    logging:
 #      driver: splunk
 #      options:

package/Dockerfile

@@ -76,19 +76,21 @@ RUN cd /tmp ;\
 
 ENV DEBCONF_NONINTERACTIVE_SEEN=true
 ENV SPLUNK_CONNECT_METHOD=hec
+ENV SYSLOGNG_HEC_WORKERS=3
 
 RUN source scl_source enable rh-python36 ; curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sh
 COPY goss.yaml /etc/goss.yaml
 
 COPY --from=0 /opt/syslog-ng /opt/syslog-ng
 COPY scripts/splunkmetrics.sh /opt/syslog-ng/sbin/splunkmetrics.sh
-COPY scripts/switch_transport.sh /opt/syslog-ng/sbin/switch_transport.sh
 COPY etc/syslog-ng.conf /opt/syslog-ng/etc/syslog-ng.conf
 COPY etc/conf.d /opt/syslog-ng/etc/conf.d
+COPY etc/context /opt/syslog-ng/etc/context
 COPY sbin/entrypoint.sh /sbin/entrypoint.sh
 
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng  -V
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng -t
+RUN mkdir -p /var/log/syslog-ng/data/disk-buffer
 
 EXPOSE 514
 EXPOSE 601/tcp