Cookin’ up some logs!
A community-driven documentation project. Fork and contribute!
Is the logstash agent too big for your edge nodes? Learn how to use rsyslog to ship logs to logstash.
Got cron jobs? Learn about how to take the output from those jobs and ship them into logstash.
Want to run logstash as a system service? This cookbook entry will show you how to run logstash from the upstart system daemon (comes with Ubuntu).
Run logstash as a service on your RHEL based system using this init script.
Parse syslog messages!
Make apache output json for access logs for easy import into logstash.
Learn about available tools for shipping logs to logstash in situations where you can’t fit the logstash agent.
Learn how to debug wrong configs or specific filters.
Run logstash as a windows service
Keep your logstash up to date with this script.
Already have a centralized rsyslog server, agent and indexer config to eat your logs.
Remove the color codes from Linux logs
Config snippets collected and provided by users
Different puppet modules for Logstash and other software
Chef cookbooks for quickly setting up Logstash and friends
StatsD plugin metrics explanation
Have a python app ? This small cookbook will help getting it ready to spit out logstash compatible log files
Have a NodeJS app? Get your logs into logstash efficiently with this cookbook.
Sample configuration for parsing syslog messages from a Cisco ASA firewall
An introductory Logstash book.
This cookbook is for and by the logstash community. You can help! Click the ‘edit this page’ link on any page to make edits (requires a github account). You can also edit content by forking the git repo.
Can’t write? File issues asking for fixes or new content!
If you aren’t finding answers here, you might consider asking for help in the logstash IRC channel (#logstash on the freenode IRC network) or on the mailing list.