I figured it was time to share my current template again, as much has changed since Logstash 1.2. Among the changes include:
doc_values everywhere applicable Defaults for all numeric types, using doc_values Proper mapping for the raw sub-field Leaving the message field analyzed, and with no raw sub-field Added ip, latitude, and longitude fields to the geoip […]
I have been busy working on Curator 1.1.0 since Elasticsearch released version 1.0, with Snapshot/Restore capability. It’s taken some time to get things to work the way I wanted them, but the results are good!
With the advent of Logstash 1.4.1, I wanted to make sure everyone knows about the new collectd codec.
In Logstash 1.3.x, we introduced the collectd input plugin. It was awesome! We could process metrics in Logstash, store them in Elasticsearch and view them with Kibana. The only downside was that you could only get around […]
Deprecated: See http://untergeek.com/2014/06/13/curator-1-1-0-released/
Get “The Logstash Book”
No, I am not the author. I am, however, in the credits on page 1, with links and examples drawn from some of the content on this site. The author, James Turnbull, approached me and asked if it would be okay to do so and […]
I have just forked zbx-statsd from github into ls-zbxstatsd.
The reason for this is that zbx-statsd was not compatible with the format coming from logstash’s statsd output plugin.
Statsd format is simply “key:value|[type]”.
In logstash, “key” is different, and the format becomes “namespace.sender.’whatever you […]
Update 2015-08-31: My most recent template/mapping can be found here.
2013-11-07: Another year, and things in the Logstash and Elasticsearch have grown and changed considerably. I am now employed by Elasticsearch to work on Logstash. This was one of the first things they wanted me to work on. So I […]
December 2017 S M T W T F S « Jun 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31