# Configure Logstash stdout

**URL:** <https://discuss.elastic.co/t/configure-logstash-stdout/276774>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [June 23, 2021, 10:42am UTC](https://discuss.elastic.co/t/configure-logstash-stdout/276774 "2021-06-23T10:42:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Atesrin](https://avatars.discourse-cdn.com/v4/letter/a/e19b73/32.png) [@Atesrin](https://discuss.elastic.co/u/Atesrin)\
**Post date:** [June 23, 2021, 10:42am UTC](https://discuss.elastic.co/t/configure-logstash-stdout/276774/1 "2021-06-23T10:42:39Z")

</div>

Hi,

I use Logstash to synchronize a MariaDB to a ES index. But my problem is that I got all the queries, the data in my logstash logs, it becomes quite as big as the index.  
How can I configure the stdout of Logstash to get only some data as

Here is my logstash pipeline :

```auto
input {	
	jdbc {
		jdbc_driver_library => ".."
		jdbc_driver_class => ".."
		jdbc_connection_string => ".."
                ...
		statement_filepath => '....sql'
	}
}

filter {
            .... # Here I format the input to correspond to the ES mapping
}

output {
        elasticsearch {
                hosts => '...'
                document_id => "%{[@metadata][_id]}"
                action => "%{[@metadata][_elasticsearch_action]}"
                ilm_enabled => true
                manage_template => false
                ilm_rollover_alias => '...'
        }

        stdout { codec => rubydebug } # I'm trying to do something here
}

```

My output logs looks like :

```auto
{"log":"Using bundled JDK: /usr/share/logstash/jdk\n","stream":"stdout","time":"2021-06-18T08:53:02.063170815Z"}
{"log":"OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.\n","stream":"stderr","time":"2021-06-18T08:53:02.079546026Z"}
{"log":"Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties\n","stream":"stdout","time":"2021-06-18T08:53:13.260990754Z"}
..
{"log":"[2021-06-18T08:54:00,734][INFO][logstash.inputs.jdbc][main][4073ae3f0baaedb0df0a19d24c92321b495d2c58d37529f41296e82999c942ee] (0.032062s) SELECT count(*) AS \"COUNT\" FROM ...
**HERE IS A HUGE QUERY WHICH IS CALL EVERY MINUTE**
{"log":"WHERE (UNIX_TIMESTAMP(participations.ROW_START) \u003e 0 AND participations.ROW_START \u003c NOW() AND participations.ROW_END \u003e NOW())) AS \"T1\" LIMIT 1\n","stream":"stdout","time":"2021-06-18T08:54:00.73571993Z"}
...

```

And after I have all data from my database reported in this log file.  
I'll use the logging parameter in my docker-compose file to block the log file size, but it's not what I want. I would like to have

```auto
{"log":"Using bundled JDK: /usr/share/logstash/jdk\n","stream":"stdout","time":"2021-06-18T08:53:02.063170815Z"}
{"log":"OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.\n","stream":"stderr","time":"2021-06-18T08:53:02.079546026Z"}
{"log":"Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties\n","stream":"stdout","time":"2021-06-18T08:53:13.260990754Z"}
..
**The time the query is launched but not all the query.**
 **Only the identify of the documents from the MariaDB and not all the document content.**

```

Could someone have an idea to get this one please ?

Thanks a lot for your help,  
Best,  
audrey

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 21, 2021, 10:42am UTC](https://discuss.elastic.co/t/configure-logstash-stdout/276774/2 "2021-07-21T10:42:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.