Logstash translate dictionary_path using http

Elastic Stack Logstash
1

is there anyway to provide Logstash with a dictionary path over http?

  filter {
    ...
    translate {
      dictionary_path => "http://0.0.0.0:8000/dictionary.yml"
      ...
    }
  }

or what are the alternatives ?

I have a few log stash distributed that all need the same copy of a dictionary that I would rather just have updated in one place.

1 Like
2

No. The existing code expects to read a local file using IO.read.

3

is there anything within Logstash that could help with this?

our alternative is to create a bash script that would pull the new version and then restart Logstash

4

By default the filter will check for an updated file and re-read it every 300 seconds. You can adjust that timing using the refresh_interval option.

1 Like
5

https://www.elastic.co/guide/en/logstash/current/plugins-filters-http.html maybe?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.