# Logstash.conf for Docker, Logspout, journal, syslog? **URL:** \ **Category:** Logstash\ **Created:** [June 17, 2015, 8:04pm UTC](https://discuss.elastic.co/t/logstash-conf-for-docker-logspout-journal-syslog/23874 "2015-06-17T20:04:24Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![cgswong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cgswong/32/3395_2.png) [@cgswong](https://discuss.elastic.co/u/cgswong)\ **Post date:** [June 17, 2015, 8:04pm UTC](https://discuss.elastic.co/t/logstash-conf-for-docker-logspout-journal-syslog/23874/1 "2015-06-17T20:04:24Z")
I'm creating a `logstash.conf` file to filter input from **Docker logs, Logspout, CoreOS systemd journal and syslog** and was hoping if anyone could share their validated `logstash.conf` file which does any of these please? I appreciate your assistance. Thanks. ---
**Author:** ![msimos](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@msimos](https://discuss.elastic.co/u/msimos)\ **Post date:** [August 20, 2015, 5:47pm UTC](https://discuss.elastic.co/t/logstash-conf-for-docker-logspout-journal-syslog/23874/2 "2015-08-20T17:47:17Z")
For logstash to receive log messages from logspout container, you just need: ```auto input { udp { port => 5000 codec => json } } ``` In your logspout Dockerfile you need to define: ```auto ENV ROUTE_URIS=logstash://ip.address.of.logstash:5000 ``` If you're just testing this, don't use 127.0.0.1. Once you start the logspout container, it will send log messages to logstash over udp to port 5000. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:31am UTC](https://discuss.elastic.co/t/logstash-conf-for-docker-logspout-journal-syslog/23874/3 "2017-07-06T05:31:26Z")