Elk

Logstash: Configuration

Logstash Configuration Method

skeleton code

intput {
}

filter {
}

output {
  output1 {}
}

Stdin & Out Example

Logstash: Output Plugins

Logstash Output Plugins with Most Common Output Types

csv

output {
  csv {
    fields => ["title", "user", "@timestamp"]
    path => "logs/output.csv"

    # exmpale of dynamic file name: "output-%{+YYYY-MM-dd}.csv"
  }
}

Logstash: Filter Plugins

Logstash Filter Plugins with Most Common Filtering Methods

csv

• parsing csv format

filter {
  csv {
    column => ["col1","col2"]
    column => {"col3" => "integer", "col4"=>"boolean"}
    type => "syslog"…

Logstash: Input Plugins

Logstash Input Plugins with Most Common Input Types

elasticsearch

input {
  elasticsearch {
    hosts => "localhost"
    index => "blogs"
    query => '{"localhost":{"match_all":{}}}'
    type => "my-elasticsearch"
 }
}

Logstash: Concepts and Components

Learn about Logstash Concenpts and Components: Inputs plugins, Filter plugins, Output plugins

Filebeat: Install (on Ubuntu 18.04)

How to install Filebeat on Ubuntu 18.04