# How Statsd output plugin work

**URL:** <https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298>\
**Category:** Logstash\
**Created:** [June 18, 2023, 6:06am UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298 "2023-06-18T06:06:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Indeed2000](https://avatars.discourse-cdn.com/v4/letter/i/dc4da7/32.png) [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Post date:** [June 18, 2023, 6:06am UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298/1 "2023-06-18T06:06:16Z")

</div>

Hi  
I have logfile that need to count number of this string on it "connection failed"

now question is log file created last day and continuously new log add to it.

which of these Statsd output configuration options "count,increment,sample\_rate" work like that?

FYI: need to count "connection failed" that already exist and new one!

Any idea?  
Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 19, 2023, 7:46am UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298/2 "2023-06-19T07:46:59Z")

</div>

It's not clear what you are asking here, as Elasticsearch doesn't have a statsd output. Do you mean Logstash?

---

<div class="post-metadata">

**Author:** ![Indeed2000](https://avatars.discourse-cdn.com/v4/letter/i/dc4da7/32.png) [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Post date:** [June 19, 2023, 3:38pm UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298/3 "2023-06-19T15:38:39Z")

</div>

@warkolm did i mention Elastic? I’m taking about logstash.  
Do you have any idea?  
Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 19, 2023, 10:55pm UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298/4 "2023-06-19T22:55:12Z")

</div>

You posted this in the Elasticsearch category hence my confusion. I will move it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 17, 2023, 10:56pm UTC](https://discuss.elastic.co/t/how-statsd-output-plugin-work/336298/5 "2023-07-17T22:56:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.