# Issue 411 Alert with Logstash

**URL:** <https://discuss.elastic.co/t/issue-411-alert-with-logstash/86657>\
**Category:** Logstash\
**Created:** [May 22, 2017, 11:26am UTC](https://discuss.elastic.co/t/issue-411-alert-with-logstash/86657 "2017-05-22T11:26:44Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![SeifAllah\_Karaa](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@SeifAllah\_Karaa](https://discuss.elastic.co/u/SeifAllah_Karaa)\
**Post date:** [May 22, 2017, 11:26am UTC](https://discuss.elastic.co/t/issue-411-alert-with-logstash/86657/1 "2017-05-22T11:26:44Z")

</div>

I have problem when i would like to connect Logstash with 411 .  
I have any problem in log files of apache server.

 ![](https://us1.discourse-cdn.com/elastic/original/3X/0/3/035e5e0b7f0e4f8bafcb59bb5ff931f4ffae4462.PNG)

$config['elasticsearch'] = [  
# Configuration for the 411 Alerts index.  
'alerts' =\> [  
'hosts' =\> ['[http://localhost.elk:9200](http://localhost.elk:9200)'],  
'index\_hosts' =\> ,  
'ssl\_cert' =\> null,  
'index' =\> null ,  
'date\_based' =\> false,  
'date\_interval' =\> null,  
'date\_field' =\> 'alert\_date',  
'date\_type' =\> null,  
'src\_url' =\> null,  
],  
# Configuration for the logstash index that 411 queries.  
'logstash' =\> [  
'hosts' =\> ['[http://localhost.elk:9200](http://localhost.elk:9200)'],  
'index\_hosts' =\> ,  
'ssl\_cert' =\> null,  
'index' =\> '[logstash-]Y.m.d',  
'date\_based' =\> true,  
'date\_interval' =\> 'd',  
'date\_field' =\> '@timestamp',  
'date\_type' =\> null,  
'src\_url' =\> null,  
],  
];

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [May 30, 2017, 11:10am UTC](https://discuss.elastic.co/t/issue-411-alert-with-logstash/86657/2 "2017-05-30T11:10:35Z")

</div>

This look like a question for 411.

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [June 5, 2017, 5:00pm UTC](https://discuss.elastic.co/t/issue-411-alert-with-logstash/86657/3 "2017-06-05T17:00:28Z")

</div>

Closed on June 5, 2017, 5:00pm UTC

This topic was automatically closed after 6 days. New replies are no longer allowed.