Input pluginsedit
An input plugin enables a specific source of events to be read by Logstash.
The following input plugins are available below. For a list of Elastic supported plugins, please consult the Support Matrix.
Plugin | Description | Github repository |
Receives events from the Elastic Beats framework | ||
Pulls events from the Amazon Web Services CloudWatch API | ||
Streams events from CouchDB’s | ||
read events from Logstash’s dead letter queue | ||
Retrieves watchdog log events from Drupal installations with DBLog enabled | ||
Reads query results from an Elasticsearch cluster | ||
Pulls events from the Windows Event Log | ||
Captures the output of a shell command as an event | ||
Streams events from files | ||
Reads Ganglia packets over UDP | ||
Reads GELF-format messages from Graylog2 as events | ||
Pushes events to a GemFire region | ||
Generates random log events for test purposes | ||
Reads events from a GitHub webhook | ||
Consume events from a Google Cloud PubSub service | ||
Reads metrics from the | ||
Generates heartbeat events for testing | ||
Streams events from the logs of a Heroku app | ||
Receives events over HTTP or HTTPS | ||
Decodes the output of an HTTP API into events | ||
Reads mail from an IMAP server | ||
Reads events from an IRC server | ||
Creates events from JDBC data | ||
Reads events from a Jms Broker | ||
Retrieves metrics from remote Java applications over JMX | ||
Reads events from a Kafka topic | ||
Receives events through an AWS Kinesis stream | ||
Reads events over a TCP socket from a Log4j | ||
Receives events using the Lumberjack protocl | ||
Captures the output of command line tools as an event | ||
Streams events from a long-running command pipe | ||
Receives facts from a Puppet server | ||
Pulls events from a RabbitMQ exchange | ||
Receives events from a Rackspace Cloud Queue service | ||
Reads events from a Redis instance | ||
Receives RELP events over a TCP socket | ||
Captures the output of command line tools as an event | ||
Streams events from files in a S3 bucket | ||
Creates events based on a Salesforce SOQL query | ||
Creates events based on SNMP trap messages | ||
Creates events based on rows in an SQLite database | ||
Pulls events from an Amazon Web Services Simple Queue Service queue | ||
Reads events from standard input | ||
Creates events received with the STOMP protocol | ||
Reads syslog messages as events | ||
Reads events from a TCP socket | ||
Reads events from the Twitter Streaming API | ||
Reads events over UDP | ||
Reads events over a UNIX socket | ||
Reads from the | ||
Reads events from a websocket | ||
Creates events based on the results of a WMI query | ||
Receives events over the XMPP/Jabber protocol | ||
Reads Zenoss events from the fanout exchange | ||
Reads events from a ZeroMQ SUB socket |