How to track/monitor logstash errors

Elastic Stack Logstash
1

Hi,

I've multiple logstash process setup and scheduled every 5 minutes. Here, I'd like to include a mechanism that capture any error or exception thrown by logstash process and eventually trigger an alert in the form of emails. What is the best approach / available options to achieve this functionality.

Thanks
Sai

2

Errors that are manifested as tags being added to events could be monitored by Elastic Watcher or Elastalert if they're sent to Elasticsearch. Errors that only show up in the Logstash log file are trickier. Perhaps you could use Filebeat to ship that stuff directly to ES and use the Watcher/Elastalert mechanism for monitoring them?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.