• Logstash Reference: other versions:
  • Logstash Reference
    • Logstash Introduction
    • Getting Started with Logstash
      • Stashing Your First Event: Basic Logstash Example
      • Setting Up an Advanced Logstash Pipeline
    • Package Repositories
    • Configuring Logstash
      • Structure of a Config File
      • Event Dependent Configuration
      • Logstash Configuration Examples
      • Command-line flags
      • Managing Multiline Events
      • Deploying and Scaling Logstash
    • Working with plugins
      • Logstash Processing Pipeline
    • Contributing to Logstash
      • How to write a Logstash input plugin
      • How to write a Logstash input plugin
      • How to write a Logstash codec plugin
      • How to write a Logstash filter plugin
    • Input plugins
      • beats
      • couchdb_changes
      • drupal_dblog
      • elasticsearch
      • exec
      • eventlog
      • file
      • ganglia
      • gelf
      • generator
      • graphite
      • github
      • heartbeat
      • heroku
      • http
      • http_poller
      • irc
      • imap
      • jdbc
      • jmx
      • kafka
      • log4j
      • lumberjack
      • meetup
      • pipe
      • puppet_facter
      • relp
      • rss
      • rackspace
      • rabbitmq
      • redis
      • salesforce
      • snmptrap
      • stdin
      • sqlite
      • s3
      • sqs
      • stomp
      • syslog
      • tcp
      • twitter
      • unix
      • udp
      • varnishlog
      • wmi
      • websocket
      • xmpp
      • zenoss
      • zeromq
    • Output plugins
      • boundary
      • circonus
      • csv
      • cloudwatch
      • datadog
      • datadog_metrics
      • email
      • elasticsearch
      • exec
      • file
      • google_bigquery
      • google_cloud_storage
      • ganglia
      • gelf
      • graphtastic
      • graphite
      • hipchat
      • http
      • irc
      • influxdb
      • juggernaut
      • jira
      • kafka
      • lumberjack
      • librato
      • loggly
      • mongodb
      • metriccatcher
      • nagios
      • null
      • nagios_nsca
      • opentsdb
      • pagerduty
      • pipe
      • riemann
      • redmine
      • rackspace
      • rabbitmq
      • redis
      • riak
      • s3
      • sqs
      • stomp
      • statsd
      • solr_http
      • sns
      • syslog
      • stdout
      • tcp
      • udp
      • webhdfs
      • websocket
      • xmpp
      • zabbix
      • zeromq
    • Filter plugins
      • aggregate
      • alter
      • anonymize
      • collate
      • csv
      • cidr
      • clone
      • cipher
      • checksum
      • date
      • dns
      • drop
      • elasticsearch
      • extractnumbers
      • environment
      • elapsed
      • fingerprint
      • geoip
      • grok
      • i18n
      • json
      • json_encode
      • kv
      • mutate
      • metrics
      • multiline
      • metaevent
      • prune
      • punct
      • ruby
      • range
      • syslog_pri
      • sleep
      • split
      • throttle
      • translate
      • uuid
      • urldecode
      • useragent
      • xml
      • zeromq
    • Codec plugins
      • avro
      • compress_spooler
      • cloudtrail
      • cloudfront
      • collectd
      • dots
      • edn_lines
      • edn
      • es_bulk
      • fluent
      • gzip_lines
      • graphite
      • json_lines
      • json
      • line
      • msgpack
      • multiline
      • netflow
      • oldlogstashjson
      • plain
      • rubydebug
      • s3_plain
      • spool