Alerting with Logstash

Elastic Stack Logstash
1

Hi,
I'll do an ELK-Stack with an alertingsystem.
So my suggestion was somthing like this:

Shipper => Redis => Indexer => ES <= Alerting (Logstash)

Can Logstash read logstash(Alerting) read or use logfiles, if my configfile looks like this:

input {
   elasticsearch {...}
}
output {
   email {...}
}

or is this the complete wrong way?

2

Don't do this. Logstash won't make a good alerting system. Either use Elastic's own Watcher or use a proper alerting system like Nagios or Icinga and have it poll ES.

3

Hi @magnusbaeck,

thanks for your reply! I'll check the products you've said.

Thank you!