# Creating config file

**URL:** <https://discuss.elastic.co/t/creating-config-file/127821>\
**Category:** Logstash\
**Created:** [April 12, 2018, 1:05pm UTC](https://discuss.elastic.co/t/creating-config-file/127821 "2018-04-12T13:05:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nada\_I](https://avatars.discourse-cdn.com/v4/letter/n/278dde/32.png) [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Post date:** [April 12, 2018, 1:05pm UTC](https://discuss.elastic.co/t/creating-config-file/127821/1 "2018-04-12T13:05:49Z")

</div>

What should i write in the config file to install logstash?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 12, 2018, 1:58pm UTC](https://discuss.elastic.co/t/creating-config-file/127821/2 "2018-04-12T13:58:40Z")

</div>

What are you talking about? Which config file?

---

<div class="post-metadata">

**Author:** ![Nada\_I](https://avatars.discourse-cdn.com/v4/letter/n/278dde/32.png) [@Nada\_I](https://discuss.elastic.co/u/Nada_I)\
**Post date:** [April 12, 2018, 2:17pm UTC](https://discuss.elastic.co/t/creating-config-file/127821/3 "2018-04-12T14:17:05Z")

</div>

i'm talking about the config file which prepaing to install logstash  
[https://www.elastic.co/downloads/logstash](https://www.elastic.co/downloads/logstash)

---

<div class="post-metadata">

**Author:** ![sancroth](https://avatars.discourse-cdn.com/v4/letter/s/838e76/32.png) [@sancroth](https://discuss.elastic.co/u/sancroth)\
**Post date:** [April 12, 2018, 2:21pm UTC](https://discuss.elastic.co/t/creating-config-file/127821/4 "2018-04-12T14:21:15Z")

</div>

You do not actually need to add this kind of configuration yet. It is not required to install logstash.  
This config file(which i suggest you break up into multiple) is where all the magic happens.  
You declare your input sources, you make your matching/maniputlation/tagging/stripping etc and then send the manipulated event to your desired output(e.g elasticsearch,files etc).

So you can skip this one for now but those configs are the bread and butter of logstash. I recommend you do some reading about how they work, a lot of documentation and examples exist as of now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 10, 2018, 2:21pm UTC](https://discuss.elastic.co/t/creating-config-file/127821/5 "2018-05-10T14:21:28Z")

</div>

Closed on May 10, 2018, 2:21pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.