Log4j input

I have tried to input several log4j messages, generated by our internal apps, into logstash with no luck. If I can to a TCP input on port 4560, it works. Do I need a specific log4j message format?

I have searched extensively and read this page:


But no luck so far.

Are you using SocketAppender on the Java side? That's what the log4j input is meant to be used with.

Yes, I had a Java Dev add the socketappender code to one of our apps. I have been testing with nc (netcat) as well.

IIRC the log4j input expects to receive serialized Java objects in which case netcat tests aren't very useful.