My last post was about sending pre-formatted JSON to logstash to avoid unnecessary grok parsing. In this post I will show how to do the same thing from rsyslog.
And again, this comes with a disclaimer. My exact model here depends on a version of logstash recent enough to have the udp input. You could […]
Update: This page is for the now deprecated Logstash 1.1.x and older. Look for the updated version of this here: http://untergeek.com/2013/09/11/getting-apache-to-output-json-for-logstash-1-2-x/
Last time we looked at ways to improve logstash/elasticsearch with elasticsearch templates. Today we’ll save ourselves a lot of grok parsing pain with apache’s custom log feature.
Disclaimer: This only works with versions […]
This page is deprecated! Use the default Logstash template instead.
Update 2014-05-16: Logstash now comes with a default template (which descended from these efforts): It’s available here.
Update 2012-11-05: My most recent template/mapping can be found
It’s been so long since I did any kind of geek blogging I figure it’s time I lived up to my name again.
I’ve taken to running Logstash and Elasticsearch as a centralized logging engine. I’ve been doing so for over a year now. The cluster I created and […]