I recently set up an ELK stack in AWS with 1 elasticsearch master, and 1 data node. Running fine for a few weeks with filebeat and some basic auth log and syslog filters. Now I'm trying to add my ELB logs from s3. I have the plugin configured and I can see s3 logs landing in logstash's tmp dir. So …

Logstash s3 elb config into existing ELK stack

warkolm (Mark Walkom) June 16, 2016, 3:28am 2

Given you won't have [@metadata][beat] in the data from that input you will probably want to define a different output.

Topic		Replies	Views
:exception=>"LogStash::ConfigurationError", :message=>"Expected one of [ \\t\\r\\n], \"#\", [A-Za-z0-9_-], '\"', \"'\", [A-Za-z_], \"-\", [0-9], \"[\", \"{\", \"]\" Logstash	1	1143	February 19, 2021
[resolved] No AWS ELB logs in the elasticsearch Logstash	2	663	March 28, 2019
Have logstash output AWS s3 ELB log to multiple elastic indexes Logstash	2	1505	July 6, 2017
s3 input plugin is not collecting ELB Logs Logstash	2	1081	February 25, 2016
s3 Input plugin is not sending ELB Data Logstash	2	915	February 25, 2016