# How to use memcached plugin in logstash

**URL:** <https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256>\
**Category:** Logstash\
**Created:** [June 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256 "2020-06-16T08:44:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![AayushPatel](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\
**Post date:** [June 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256/1 "2020-06-16T08:44:21Z")

</div>

Hi,  
I am recently learning elk stack and paying more attention to logstash configs. most recently decided to use memcached plugin to get data from another server and write it to elasticsearch  
according to this url

> **[Enriching ElasticSearch With Threat Data - Part 2 - Memcached and Python -...](https://www.securitydistractions.com/2019/05/17/enriching-elasticsearch-with-threat-data-part-2-memcached-and-python/)**
>
> In our previous post we covered MISP and some of the preparation work needed to integrate MISP and ElasticSearch. With MISP now setup and prepped, we can now focus on Python and Memcached. Part 1:-...

  
I tried to run MISP for storing data in memory with python code and also tried connecting via logstash memcached to get data, but unfortunately conf do not work.  
Do I need to have something as input filter for memcached plugin or not?  
i will be grateful if you could help me with an example or correcting my conf code.  
thanks

```auto
filter {
	memcached {
		hosts => ["x.x.x.67:11211"]
		namespace => "convert_mm"
		get => {
		"%{millimeters}" => "[inches]"
		}
		add_tag => ["from_cache"]
		id => "memcached-get"
	}

if ![misp_src]
	{
		mutate
		{
			add_field=> {"[misp_src]" => "none"}	
		}
	}
}

output{
		elasticsearch{
			hosts => "x.x.x.x:9200"
			ssl=> true
			ssl_certificate_verification => false
			cacert => "x.cer"
			user => "x"
			password => "x"
			index => "test"
		}
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 14, 2020, 8:44am UTC](https://discuss.elastic.co/t/how-to-use-memcached-plugin-in-logstash/237256/2 "2020-07-14T08:44:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.