solr_httpedit

Note

This is a community-maintained plugin! It does not ship with Logstash by default, but it is easy to install by running bin/logstash-plugin install logstash-output-solr_http.

This output lets you index&store your logs in Solr. If you want to get started quickly you should use version 4.4 or above in schemaless mode, which will try and guess your fields automatically. To turn that on, you can use the example included in the Solr archive:

tar zxf solr-4.4.0.tgz
cd example
mv solr solr_ #back up the existing sample conf
cp -r example-schemaless/solr/ .  #put the schemaless conf in place
java -jar start.jar   #start Solr

You can learn more at the Solr home page

 

Synopsisedit

This plugin supports the following configuration options:

Required configuration options:

solr_http {
}

Available configuration options:

Setting Input typeRequiredDefault value

codec

codec

No

"plain"

document_id

string

No

nil

flush_size

number

No

100

idle_flush_time

number

No

1

solr_url

string

No

"http://localhost:8983/solr"

workers

number

No

1

Detailsedit

 

codecedit

  • Value type is codec
  • Default value is "plain"

The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.

document_idedit

  • Value type is string
  • Default value is nil

Solr document ID for events. You’d typically have a variable here, like

flush_sizeedit

  • Value type is number
  • Default value is 100

Number of events to queue up before writing to Solr

idle_flush_timeedit

  • Value type is number
  • Default value is 1

Amount of time since the last flush before a flush is done even if the number of buffered events is smaller than flush_size

solr_urledit

  • Value type is string
  • Default value is "http://localhost:8983/solr"

URL used to connect to Solr

workersedit

  • Value type is number
  • Default value is 1

The number of workers to use for this output. Note that this setting may not be useful for all outputs.