# Logstash

**URL:** https://discuss.elastic.co/c/elastic-stack/logstash/14.md?page=1266

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1267

---

## [Logstash repository and package](https://discuss.elastic.co/t/logstash-repository-and-package/309)

<div class="topic-metadata">

**Author:** [@UveLokk](https://discuss.elastic.co/u/UveLokk)\
**Replies:** 1\
**Last updated:** [May 6, 2015, 7:05pm UTC](https://discuss.elastic.co/t/logstash-repository-and-package/309 "2015-05-06T19:05:33Z")

</div>

Hi, some remarks on Logstash APT repository and package: 1) Logstash package version numbering is loused up: $ grep logstash /etc/apt/sources.list.d/elk.list deb http://packages.elasticsearch.org/logstash/1.5/debi…

---

## [Implementing transit codec for logstash](https://discuss.elastic.co/t/implementing-transit-codec-for-logstash/139)

<div class="topic-metadata">

**Author:** [@kebbkh](https://discuss.elastic.co/u/kebbkh)\
**Replies:** 8\
**Last updated:** [May 6, 2015, 6:37pm UTC](https://discuss.elastic.co/t/implementing-transit-codec-for-logstash/139 "2015-05-06T18:37:23Z")

</div>

As per the title, I am looking for help writing a transit codec for logstash, any help would be much appreciated!

---

## [How to concatenate contents of two string arrays with same number of elements](https://discuss.elastic.co/t/how-to-concatenate-contents-of-two-string-arrays-with-same-number-of-elements/256)

<div class="topic-metadata">

**Author:** [@markus](https://discuss.elastic.co/u/markus)\
**Replies:** 3\
**Last updated:** [May 6, 2015, 5:34pm UTC](https://discuss.elastic.co/t/how-to-concatenate-contents-of-two-string-arrays-with-same-number-of-elements/256 "2015-05-06T17:34:00Z")

</div>

Hi, I have to string arrays with the same number of elements. Is it possible to create a new string array (or overwrite one of the existing ones) containing the string concatentation of the elements from both arrays at t…

---

## [Non-sprintf reference to fields](https://discuss.elastic.co/t/non-sprintf-reference-to-fields/244)

<div class="topic-metadata">

**Author:** [@Mike\_Hepple](https://discuss.elastic.co/u/Mike_Hepple)\
**Replies:** 2\
**Last updated:** [May 5, 2015, 11:02pm UTC](https://discuss.elastic.co/t/non-sprintf-reference-to-fields/244 "2015-05-05T23:02:30Z")

</div>

I'm trying to set up environment variables to control my logstash elasticsearch output , like below # filter environment { add\_field\_from\_env =\> \[ "elasticsearch\_host", "ES\_HOST", "elasticsearch\_port…

---

## [Raising issues for Logstash plugins](https://discuss.elastic.co/t/raising-issues-for-logstash-plugins/220)

<div class="topic-metadata">

**Author:** [@hakman](https://discuss.elastic.co/u/hakman)\
**Replies:** 2\
**Last updated:** [May 5, 2015, 2:34pm UTC](https://discuss.elastic.co/t/raising-issues-for-logstash-plugins/220 "2015-05-05T14:34:23Z")

</div>

Hi, I raised an issue for Logstash in gitub: https://github.com/logstash-plugins/logstash-filter-date/issues/17. Can you confirm that this is the right place or point me to it? Thanks, Ciprian

---

## [OOM error with logstash S3 input over large data](https://discuss.elastic.co/t/oom-error-with-logstash-s3-input-over-large-data/214)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 0\
**Last updated:** [May 5, 2015, 1:00pm UTC](https://discuss.elastic.co/t/oom-error-with-logstash-s3-input-over-large-data/214 "2015-05-05T13:00:35Z")

</div>

I have Elasticsearch, Logstash running on a m3.xlarge. ES 1.5.2 Logstash 1.5.0-rc3 ArchLinux I am trying to index 3 months log data into ELK, but after some time I see that kernel is killing the processes because of…

---

## [Logstash timestamp issue - the parsed value is one hour behind the log value](https://discuss.elastic.co/t/logstash-timestamp-issue-the-parsed-value-is-one-hour-behind-the-log-value/170)

<div class="topic-metadata">

**Author:** [@DannyK](https://discuss.elastic.co/u/DannyK)\
**Replies:** 3\
**Last updated:** [May 5, 2015, 12:12pm UTC](https://discuss.elastic.co/t/logstash-timestamp-issue-the-parsed-value-is-one-hour-behind-the-log-value/170 "2015-05-05T12:12:24Z")

</div>

I am using the following code to read McAfee Logs ( I chose to use CSV filters because grok filters turned out to be messy) input { stdin{} } filter { csv { columns =\> \["timestamp", "McAf\_ThreatSeverity…

---

## [How does Shield integrate with Logstash?](https://discuss.elastic.co/t/how-does-shield-integrate-with-logstash/91)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 1, 2015, 10:16am UTC](https://discuss.elastic.co/t/how-does-shield-integrate-with-logstash/91 "2015-05-01T10:16:10Z")

</div>

Logstash 1.5 RC1 (or above) is required for Shield integration. Logstash provides Elasticsearch plugins used to index and retrieve documents through HTTP, transport or client node protocols. These plugins support au…

---

## [How does Logstash integrate with Shield?](https://discuss.elastic.co/t/how-does-logstash-integrate-with-shield/90)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 1, 2015, 10:15am UTC](https://discuss.elastic.co/t/how-does-logstash-integrate-with-shield/90 "2015-05-01T10:15:10Z")

</div>

Logstash 1.5 RC1 (or above) is required for Shield integration. Logstash provides Elasticsearch plugins used to index and retrieve documents through HTTP, transport or client node protocols. These plugins support au…

---

## [How to Capture a Heap Dump from a Running JVM - Logstash](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm-logstash/85)

<div class="topic-metadata">

**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\
**Replies:** 0\
**Last updated:** [May 1, 2015, 10:04am UTC](https://discuss.elastic.co/t/how-to-capture-a-heap-dump-from-a-running-jvm-logstash/85 "2015-05-01T10:04:17Z")

</div>

This article applies to any product that runs a JVM -- Elasticsearch and Logstash 1.5 (or an earlier variant when using JRuby, which Logstash 1.5 uses). NOTE - the JVM will pause during the collection of this heap dump…

[Previous page](https://discuss.elastic.co/c/elastic-stack/logstash/14.md?page=1265)
