Can Logstash process archived data in the .tar.gz format?

Elastic Stack Logstash
1

Hi,

I am trying to figure out a solution.

  • Feed Logstash with .tar.gz archive
  • Extract from .tar.gz archive files of interest
  • output files of interest to Elasticsearch

Does LS have support for the .tar.gz format as input?
If so how LS config looks like?

Thanks n advanced,

2

No, Logstash can't read files within tar.gz archives. You'll have to write a script that extracts the files into a temporary directory that Logstash can monitor.

3

Thanks a lot for your quick response,

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.