Can Logstash process archived data in the .tar.gz format?


I am trying to figure out a solution.

  • Feed Logstash with .tar.gz archive
  • Extract from .tar.gz archive files of interest
  • output files of interest to Elasticsearch

Does LS have support for the .tar.gz format as input?
If so how LS config looks like?

Thanks n advanced,

No, Logstash can't read files within tar.gz archives. You'll have to write a script that extracts the files into a temporary directory that Logstash can monitor.

Thanks a lot for your quick response,

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.