Top "Logstash" questions

Logstash is a tool for managing events and logs.

Delete logs after consumption: logstash

I have logstash watching a directory on the host. Every time it sees a log that matches the path I …

logging logstash logstash-file
Syslog forwared HAProxy logs filtering in Logstash

I'm having issues understanding how to do this correctly. I have the following Logstash config: input { lumberjack { port => 5000 host =&…

logstash logstash-grok logstash-forwarder
Email alert after threshold crossed, logstash?

I am using logstash, elasticsearch and kibana to analyze my logs. I am alerting via email when a particular string …

elasticsearch logstash kibana statsd riemann
Block Comments in Logstash Config file

I am just getting started with Logstash and wondering whether there is a way to specify block comments in logstash …

logstash logstash-configuration block-comments
INFO No non-zero metrics in the last 30s message in filebeat

I'm new to ELK and I'm getting issues while running logstash. I ran the logatash as defined in below link …

logstash filebeat
Beat and Logstash - Connection reset by peer

I have in the same machine Elasticsearh, Logstash and Beat/filebeat. Filebeat is configured to send information to localhost:5043. Logstash …

logstash filebeat
Creating custom elasticsearch index with logstash

I have to create custom index in elasticsearch using logstash. I have created new template in elasticsearch, and in logstash …

elasticsearch logstash logstash-configuration
Log storage location ELK stack

I am doing centralized logging using logstash. I am using logstash-forwarder on the shipper node and ELK stack on the …

elasticsearch logstash kibana logstash-forwarder elastic-stack
Logstash Update a document in elasticsearch

Trying to update a specific field in elasticsearch through logstash. Is it possible to update only a set of fields …

elasticsearch logstash logstash-configuration
have a grok filter create nested fields as a result

I have a drupal watchdog syslog file that I want to parse into essentially two nested fields, the syslog part …

logstash syslog logstash-grok