# Openshift and logstash

**URL:** https://discuss.elastic.co/t/openshift-and-logstash/87776
**Category:** Logstash
**Created:** [May 31, 2017, 3:11pm UTC](https://discuss.elastic.co/t/openshift-and-logstash/87776 "2017-05-31T15:11:56Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![pahermoso](https://avatars.discourse-cdn.com/v4/letter/p/5f8ce5/32.png) [@pahermoso](https://discuss.elastic.co/u/pahermoso)
#### Post date: [May 31, 2017, 3:11pm UTC](https://discuss.elastic.co/t/openshift-and-logstash/87776/1 "2017-05-31T15:11:56Z")

</div>

Hi, I'm thinking to use logstash to increase the quality of logs coming from an Openshift platform. These logs are captured with FluentD and included into an Elasticsearch index directly.

My intention is to handle logstash to extract certain messages from this index and move them, after analysing them, to a different ES cluster with the full info in.

Any clue?

---

<div class="post-metadata">

### Author: ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [May 31, 2017, 4:17pm UTC](https://discuss.elastic.co/t/openshift-and-logstash/87776/2 "2017-05-31T16:17:35Z")

</div>

Logstash has an Elasticsearch input plugin which should do the trick.

---

<div class="post-metadata">

### Author: ![pahermoso](https://avatars.discourse-cdn.com/v4/letter/p/5f8ce5/32.png) [@pahermoso](https://discuss.elastic.co/u/pahermoso)
#### Post date: [May 31, 2017, 4:47pm UTC](https://discuss.elastic.co/t/openshift-and-logstash/87776/3 "2017-05-31T16:47:58Z")

</div>

Thanks a lot

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 28, 2017, 4:48pm UTC](https://discuss.elastic.co/t/openshift-and-logstash/87776/4 "2017-06-28T16:48:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
