I would like to load all my inputs via the conf.d folder.
What is most minimal logstash.yml fle I can have that will allow logstash to start and then load all the yml files in the conf.d folder?
Current logstash.yml file
azureuser@kafka-elk-lab3:~$ sudo cat /etc/logstash/logstash.yml
input {
kafka {
bootstrap_servers => "localhost:9092"
topics => "apache"
}
}
filter {
grok {
match => { "message" => "%{COMBINEDAPACHELOG}" }
}
date {
match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
}
geoip {
source => "clientip"
target => "clientgeo"
}
}
output {
elasticsearch {
hosts => ["localhost:9200"]
}
}