Logstash Email Output

Elastic Stack Logstash
1

Hi,

I am wondering how to configure an email output for Outlook. In my current logstash configuration, I have the following code:

output {
  elasticsearch {
    hosts => "localhost:9200"
    index => "somename"
  }
  if "Error" in [message]
     email {
       to=> 'email@somemail.com'
       from => 'email@anotheremail.com'
       subject => 'ALERT: Error in Logs'
       body => "Tags: %{tag}\\n\\Information:\\n%{message}"
     }
  }
  stdout{}
}

I see here that I will need to configure the SMTP in elasticsearch.yml. My question is: Is that all the required info to send an email when a log contains error? Also, is xpack.notifcations included in the default subscription?

2

The plugin starts a SMTP conversation with a SMTP server. If the server is not running locally (on localhost) you need to provide an address setting. The examples omit this because a local SMTP server listening on port 25 is assumed.

3

Just to be clear, I won't be able to configure this with a regular subscription correct? I do not have alerting currently and I believe notifications is part of that package.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.