Top "Logstash-configuration" questions

Logstash configuration has three main sections - Input, Filter and Output.

Logstash File input: sincedb_path

Upon restarting Logstash, at times observed that Logstash duplicates the log events. Was wondering as to what would be the …

logstash logstash-file logstash-configuration
Read log file from a remote machine with file input plugin using logstash

Presently I have my logs and logstash running on the same machine, so I read my logs placed on my …

logstash logstash-forwarder logstash-configuration
Logstash filter remove_field for all fields except a specified list of fields

I am parsing a set of data into an ELK stack for some non-tech folks to view. As part of …

logstash logstash-configuration
How should I use sql_last_value in logstash?

I'm quite unclear of what sql_last_value does when I give my statement as such: statement => "SELECT * from …

elasticsearch jdbc logstash logstash-configuration elasticsearch-5
Create a new index per day for Elasticsearch in Logstash configuration

I intend to have an ELK stack setup where daily JSON inputs get stored in log files created, one for …

elasticsearch logstash logstash-configuration
Kafka input to logstash plugin

I am attempting to read from a kafka cluster of 3 servers into logstash inorder to write it to a syslog …

elasticsearch apache-kafka logstash logstash-configuration
Logstash - remove deep field from json file

I have JSON file that I'm sending to ES through logstash. I would like to remove 1 field ( It's deep field ) …

logstash logstash-grok logstash-configuration
Sending Docker container logs to ELK Stack by configuring the logging drivers - Easy Method

I usually run applications as docker containers because of its high flexibility and availability. Is there a way to get …

logging docker syslog elastic-stack logstash-configuration
Parsing XML file using Logstash

I am trying to parse an XML file in Logstash. I want to use XPath to do the parsing of …

elasticsearch logstash logstash-configuration
logstash output to elasticsearch with document_id; what to do when I don't have a document_id?

I have some logstash input where I use the document_id to remove duplicates. However, most input doesn't have a …

elasticsearch logstash logstash-configuration