Top "Logstash" questions

Logstash is a tool for managing events and logs.

Logstash config, "if string contains..."

So, let's assume that I have a portion of a log line that looks something like this: GET /restAPI/callMethod1/8675309 …

logstash logstash-grok logstash-configuration
Alert/Notification using Kibana3?

I am using logstash-1.4.1, elasticsearch-1.1.1 and kibana-3.1.0 for analyzing my logs. I am able to view and query my logs. …

elasticsearch alert logstash kibana
Elasticsearch: No handler for type [keyword] declared on field [hostname]

I get above Mapper Parsing Error on Elasticsearch when indexing log from filebeat. I tried both Filebeat -> Elasticserach …

elasticsearch logstash elastic-stack filebeat
Logstash not creating index on Elasticsearch

I'm trying to setup a ELK stack on EC2, Ubuntu 14.04 instance. But everything install, and everything is working just fine, …

elasticsearch ubuntu-14.04 logstash kibana sysadmin
Generating filebeat custom fields

I have an elasticsearch cluster (ELK) and some nodes sending logs to the logstash using filebeat. All the servers in …

elasticsearch logstash custom-fields filebeat
Error: Expected one of #, input, filter, output at line 24, column 1 (byte 528) after "}

I am able to run logstash as: bin/logstash -f /etc/logstash/conf.d/config.json but running logstash as …

logstash logstash-configuration
Logstash make a copy a nested field with mutate.add_field

I wanted to make a copy of a nested field in a Logstash filter but I can't figure out the …

logstash
Logstash configuration reload

Is the Logstash configuration reloaded every time the agent is restarted? It doesn't seem to pick up my changes immediately (…

logstash
Grok pattern for different types of log in a logfile

I am trying to write grok pattern for my log file which has three different types of logs, I want …

logstash logstash-grok
Logstash expected one of #

I'm currently trying to run Lostash with the following config file: input { stdin { } } output { rabbitmq { exchange => "test_exchange" exchange_…

logstash logstash-configuration