Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Logstash Lunch and Learn

Logstash Lunch and Learn

Quick intro to logstash I gave for CMGd at a lunch and learn. The audience already had a basic setup going.

John Vincent

March 22, 2012
Tweet

More Decks by John Vincent

Other Decks in Technology

Transcript

  1. Logstash • Started by Jordan Sissel and Pete Fritchman •

    ~2004 • Inputs → Filters → Outputs • Jruby (and now limited YARV support) • UNIX pipe with super powers
  2. Inputs • AMQP • Exec • File • Heroku •

    Pipe • Redis • STDIN • Stomp • Syslog* • TCP • UDP* • Twitter • XMPP • ZeroMQ
  3. Filters • Date* • DNS • Environment • Gelfify •

    Grep* • Grok* • Grok Discovery • JSON • Multiline* • Mutate • Split • ZeroMQ(!)
  4. Outputs • AMQP • ElasticSearch • ElasticSearch River • File

    • Ganglia • Graphite • Juggernaut • Loggly • Metric Catcher • MongoDB • Nagios • Nagios NCSA • Pipe • Redis • Riemann • Statsd • STDOUT • Stomp • TCP • WebSockets • XMPP • Zabbix • ZeroMQ
  5. Not just for logs • Event (Timestamp + data) •

    Logstash ALL the things • It's like …
  6. or

  7. or

  8. If you send it to Logstash you can ... •

    Slice it • Dice it • Scatter, Smother, Cover it • Love it, Hate it • Chew it up • Spit it out (wherever you want)