Logstash: Grok patterns location

  1. yes you can. you can also define environment variable as specified in https://www.elastic.co/guide/en/logstash/current/environment-variables.html

  2. absolute path always works . just remember that user who runs logstash needs to have sufficient permission to the paths

1 Like