# Hosting Logstash tips and tricks

**URL:** <https://discuss.elastic.co/t/hosting-logstash-tips-and-tricks/107026>\
**Category:** Logstash\
**Created:** [November 9, 2017, 10:56am UTC](https://discuss.elastic.co/t/hosting-logstash-tips-and-tricks/107026 "2017-11-09T10:56:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pj.vandendriessche](https://avatars.discourse-cdn.com/v4/letter/p/9fc348/32.png) [@pj.vandendriessche](https://discuss.elastic.co/u/pj.vandendriessche)\
**Post date:** [November 9, 2017, 10:56am UTC](https://discuss.elastic.co/t/hosting-logstash-tips-and-tricks/107026/1 "2017-11-09T10:56:47Z")

</div>

Totally new to the ELK stack and a beginner on programming level speaking here.

I currently have a Django Python application running on Heroku. It works with Papertrail logging. Papertrail receives the logs through a so-called "drains"-setup from Heroku.

I tried to use this "drains"-setup to feed directly logs into Elastic Cloud. The logs arrive but I get this kind of warning:

```
[WARN][org.elasticsearch.deprecation.rest.RestController] Content type detection for rest requests is deprecated. Specify the content type using the [Content-Type] header.

```

Therefore, I was looking into hosting Logstash so I have the right format (?) in which the logs enter the Elasticsearch environment.

Some questions therefore:

- Is this the right approach? Using Logstash to get a 'clean' the format or do I have some other problem
- What would be the best practices to host Logstash? AWS, GCP?
- How would I do that? Any good tutorials - not super familiar with launching stuff on AWS and GCP.
- would it be easier to just go for the heroku add-on?

Thanks,  
Pieter-Jan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2017, 10:56am UTC](https://discuss.elastic.co/t/hosting-logstash-tips-and-tricks/107026/2 "2017-12-07T10:56:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
