Top "Logstash" questions

Logstash is a tool for managing events and logs.

Use grok to add the log filename as a field in logstash

I'm using Grok & Logstash to send access logs from Nginx to Elastic search. I'm giving Logstash all my access …

regex logstash logstash-grok
logstash: multiple logfiles with different pattern

We want to set up a server for logstash for a couple of different project in our company. Now I …

filter logstash kibana logstash-grok logfiles
Drop log line containing hash character

In my Logstash shipper I want to filter out lines commented with the hash character: #This log row should be …

regex logging logstash logstash-grok
Which Serilog sink to use for sending to Logstash?

We started using Serilog in combination with Elasticsearch, and it's a very efficient way to store structure log data (and …

logging elasticsearch logstash serilog
logstash grok - how to do conditional pattern matching?

I have these three log lines in the same log file: INFO [2015-08-27 18:46:14,279] ({qtp243745864-44} NotebookServer.java[onMessage]:101) - …

regex logstash logstash-grok
Adding fields depending on event message in Logstash not working

I have ELK installed and working in my machine, but now I want to do a more complex filtering and …

elasticsearch logstash kibana logstash-grok
Updating the default index number_of_replicas setting for new indices

I've tried updating the number of replicas as follows, according to the documentation curl -XPUT 'localhost:9200/_settings' -d ' { "index" : { "…

elasticsearch logstash
Logstash date filter not updating @timestamp with Apache timestamp

I'm trying to backfill some past Apache access log data with logstash, therefore I need the event @timestamp to be …

apache date logstash
Docker-compose links vs external_links

I believe it is simple question but I still do not get it from Docker-compose documentations. What is the difference …

elasticsearch docker logstash docker-compose
How to reference environment variables in logstash configuration file?

Is it possible to reference environment variables in logstash configuration? In my case, i want to make my elasticsearch address …

logstash