Top "Logstash" questions

Logstash is a tool for managing events and logs.

FileBeat directly to ELS or via LogStash?

We are installing ELS and Kibana for log aggregation/analysis. The first system to use it is greenfield so we …

elasticsearch logstash kibana filebeat
rsyslog sending badly encoded (corrupted?) data via tcp (receiving using logstash)

My rsyslog logs locally correctly, however I wanted to also receive the logs remotely, so I added the rule: *.* @@myIP:5141 …

encoding logstash rsyslog
Use filebeat or logstash to open gzip files

I might be asking for too much here and I think it's just not implemented yet but I have ELK …

elasticsearch logstash elastic-stack logstash-forwarder lumberjack
Should I update GeoLiteCity.dat periodically?

Logstash can make use of a bundled GeoLiteCity.dat database for IP address geographical lookups. Is this database the same …

elasticsearch logstash geoip kibana
File input not working for logstash

I get the correct output when I use stdin as an input stream. But whenever I use the file as …

file-io output logstash grok
Selective parsing of csv file using logstash

I am trying to feed data into elasticsearch from csv files, through logstash. These csv files contain the first row …

csv logstash logstash-grok
LogStash unable to retrieve license information from license. Response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/_xpack'

I am strugglling to get Docker LogStash connecting to Docker ElasticSearch with xpack security enable. The main logs are: logstash_1 | [2020…

docker elasticsearch docker-compose logstash elasticsearch-x-pack
How to authenticate Logstash output to a secure Elasticsearch URL (version 5.6.5)

I am using Logstash and Elasticsearch versions 5.6.5. So far used elasticsearch output with HTTP protocol and no authentication. Now Elasticsearch …

authentication elasticsearch https logstash logstash-configuration
Filebeat vs Rsyslog for forwarding logs

I am currently using filebeat to forward logs to logstash and then to elasticsearch. Now, I am thinking about forwarding …

elasticsearch logstash rsyslog filebeat
Parsing XML data from Filebeat using Logstash

I am using Filebeat to parse XML files in Windows, and sending them to Logstash for filtering and sending to …

xml elasticsearch logstash filebeat