I am really struggling to understand the documentation, and as such cannot work out what I need to do to get logstash to work.
So logstash arrives as a zip (Is there an msi?)
But nothing configured. The documentation doesn't really say much about each configuration option, so are any actually required, surely some must need some setting.
I cannot find where to configure Elasticsearch destination in the configuration. I have found something that suggests this goes into the config that defines the metric, surely not?
Do do I get logstash to run as a service so that the metric that I am capturing get captured at the defined interval?
Apologies but completely lost and have no idea of what to do , or where to go to work it out, and spending far too long trying to google snippets of information.
Logstash works on a simple concept of defining a number of pipelines with an: input, filter, and output. The inputs can be a simple listener that just waits for events to be thrown at it from another service like filebeat or it can generate it's own events depending on which input plugin you use.
Logstash is a swiss army knife of the elastic stack.
It can run as a service, as a standalone executable as well.
From the command line you can usually run logstash like this:
logstash.exe -f sample.conf
A basic logstash configuration file looks like this:
sample.conf
input {
#define an input source such as filebeat/metricbeat/etc.. or any number of input plugins
# https://www.elastic.co/guide/en/logstash/current/input-plugins.html
beats {
...
}
}
filter {
#define any number of enhancement filters such as mutating data, doing a dictionary lookup based on an input value, etc... This section is optional
# https://www.elastic.co/guide/en/logstash/current/filter-plugins.html
}
output {
#define any number of outputs after all the filters are done from the input such as
# https://www.elastic.co/guide/en/logstash/current/output-plugins.html
elasticsearch, influxdb, file, stdout, etc...
elasticsearch {
...
}
}
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.