solr_httpedit

This is a community-maintained plugin! It does not ship with Logstash by default, but it is easy to install by running bin/plugin install logstash-output-solr_http.

This output lets you index&store your logs in Solr. If you want to get started quickly you should use version 4.4 or above in schemaless mode, which will try and guess your fields automatically. To turn that on, you can use the example included in the Solr archive:

    tar zxf solr-4.4.0.tgz
    cd example
    mv solr solr_ #back up the existing sample conf
    cp -r example-schemaless/solr/ .  #put the schemaless conf in place
    java -jar start.jar   #start Solr

You can learn more at the Solr home page

 

Synopsisedit

This plugin supports the following configuration options:

Required configuration options:

solr_http {
}

Available configuration options:

Setting Input type Required Default value

codec

codec

No

"plain"

document_id

string

No

nil

flush_size

number

No

100

idle_flush_time

number

No

1

solr_url

string

No

"http://localhost:8983/solr"

workers

number

No

1

Detailsedit

 

codecedit

  • Value type is codec
  • Default value is "plain"

The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.

document_idedit

  • Value type is string
  • Default value is nil

Solr document ID for events. You’d typically have a variable here, like %{foo} so you can assign your own IDs

flush_sizeedit

  • Value type is number
  • Default value is 100

Number of events to queue up before writing to Solr

idle_flush_timeedit

  • Value type is number
  • Default value is 1

Amount of time since the last flush before a flush is done even if the number of buffered events is smaller than flush_size

solr_urledit

  • Value type is string
  • Default value is "http://localhost:8983/solr"

URL used to connect to Solr

workersedit

  • Value type is number
  • Default value is 1

The number of workers to use for this output. Note that this setting may not be useful for all outputs.