# New to the stack, http logstash input question

**URL:** https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981
**Category:** Logstash
**Created:** [June 14, 2018, 6:29pm UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981 "2018-06-14T18:29:34Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![mcarpenterjr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcarpenterjr/32/32238_2.png) [@mcarpenterjr](https://discuss.elastic.co/u/mcarpenterjr)
#### Post date: [June 14, 2018, 6:29pm UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981/1 "2018-06-14T18:29:34Z")

</div>

Completely new to the elasticsearch-stack, having some trouble understanding where and the format logstash plugins are configured.

I was able to install the `logstash_http_input` plugin but I am having trouble understanding where the configuration is specified for the plugin. Or if there is any configuration for the plugin, the documentation lists options but not where they get specified.

Like how do I specify the port and host that the input should be receiving on? or I have a returner that lists username and pass as options, where/how would I get/specify those?

My ultimate end goal is to consume the output from hubble audits. Hubble has a set of predefined returners so I should be good there.

Any help would be much appreciated.

---

<div class="post-metadata">

### Author: ![tag\_v](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tag_v/32/47466_2.png) [@tag\_v](https://discuss.elastic.co/u/tag_v)
#### Post date: [June 14, 2018, 6:35pm UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981/2 "2018-06-14T18:35:45Z")

</div>

> [@mcarpenterjr](#):
>
> but I am having trouble understanding where the configuration is specified for the plugin. Or if there is any configuration for the plugin, the documentation lists options but not where they get specified.

no specific config for individual plugins. create an configuration file with input block containing http input, filter if any and output as required. Run the file with command: **bin\logstash -f "path of config file"**

For http input plugin reference: [Http input plugin | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-http.html)

---

<div class="post-metadata">

### Author: ![mcarpenterjr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcarpenterjr/32/32238_2.png) [@mcarpenterjr](https://discuss.elastic.co/u/mcarpenterjr)
#### Post date: [June 14, 2018, 8:20pm UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981/3 "2018-06-14T20:20:38Z")

</div>

So the config is a `.yml`?

I read the print out from --help and I better understand, but do I have to do this everytime I restart the logstash daemon? or this is a once everytime the config changes deal?

---

<div class="post-metadata">

### Author: ![tag\_v](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tag_v/32/47466_2.png) [@tag\_v](https://discuss.elastic.co/u/tag_v)
#### Post date: [June 15, 2018, 1:34am UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981/4 "2018-06-15T01:34:08Z")

</div>

one time configure until or unless you made changes in the config file

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 13, 2018, 1:34am UTC](https://discuss.elastic.co/t/new-to-the-stack-http-logstash-input-question/135981/5 "2018-07-13T01:34:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
