Monitoring Log Activity into Logstash

Elastic Stack Logstash
1

Hi,

I’m looking for a way to alert ourselves when we are either
not receiving logs into logstash or the logs received are not being sent to ES.

I could come up with some O/S ways in Linux like inotifywait
and maybe some bash scripts that could watch a number of ELK files but I’m
wanting to know what is the best practice for doing this with the ELK stack.

Ideally I’d like to receive an email alert if no logs have
been received or they are not being sent to ES.

Thanks

2

You can probably use Watcher for this. Another option is to have Logstash ping Lovebeat for some or all events, and Lovebeat will fire an alert when the rate drops below a threshold.