Logstash

Configure

Plugins

• Redis

Run

Running on Docker

• Official doc on Running Logstash on Docker on elastic.co
• Configuring Logstash for Docker on elastic.co

Recipes

Replace Timestamp by another field

filter {
  date {
    match => ["@t", "yyyy-MM-dd'T'HH:mm:ss.SSSSSSS'Z'"]
    target => "@timestamp"
  }
}

See plugins-filters-date

Grok

• grokdebug

Examples

• Logstash Configuration Examples