Logstash - Revision history

Busk at 14:05, 22 October 2021

2021-10-22T14:05:02Z

2021-10-22T13:59:31Z

2021-10-22T13:42:46Z

2021-10-22T13:24:50Z

2021-10-22T02:06:36Z

2021-10-22T01:53:53Z

2021-10-22T01:47:58Z

2021-10-22T01:45:11Z

2021-10-22T01:42:54Z

2021-10-22T01:41:45Z

@@ Line 45: / Line 45: @@
 ```
   logger TEST2 -n 127.0.0.1 --udp --port 514
-logger TEST2 -n 127.0.0.1 --tcp --port 6514
+logger TEST2 -n 127.0.0.1 --tcp --port 514
 ```
 https://askubuntu.com/questions/1091659/how-to-send-tls-syslog-message-via-logger-command

@@ Line 12: / Line 12: @@
 - https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939
 - https://bobcares.com/blog/send-syslog-with-ssl-tls-to-nagios-log-server/
@@ Line 46: / Line 47: @@
 logger TEST2 -n 127.0.0.1 --tcp --port 6514
 ```

← Older revision		Revision as of 13:42, 22 October 2021
Line 11:		Line 11:
	- https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#enable-ts-logstash		- https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#enable-ts-logstash
	- https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939		- https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939
		+	- https://bobcares.com/blog/send-syslog-with-ssl-tls-to-nagios-log-server/

@@ Line 38: / Line 38: @@
 run command
 ```
-/usr/share/logstash/bin/logstash -f logstash.conf
+/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf
 ```
 ```
-  logger TEST2 -n 127.0.0.1 --udp --port 12345
+  logger TEST2 -n 127.0.0.1 --udp --port 514
 ```

← Older revision		Revision as of 02:06, 22 October 2021
Line 10:		Line 10:
	- https://www.linode.com/docs/guides/secure-logstash-connections-using-ssl-certificates/		- https://www.linode.com/docs/guides/secure-logstash-connections-using-ssl-certificates/
	- https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#enable-ts-logstash		- https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#enable-ts-logstash
		+	- https://discuss.elastic.co/t/sending-logs-from-syslog-ng-to-logstash-with-and-without-tls/252939

← Older revision		Revision as of 01:53, 22 October 2021
Line 8:		Line 8:
	- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html		- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html
	- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html		- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html
		+	- https://www.linode.com/docs/guides/secure-logstash-connections-using-ssl-certificates/
		+	- https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash#enable-ts-logstash

← Older revision		Revision as of 01:47, 22 October 2021
Line 6:		Line 6:
	- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04		- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04

−	https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html	+	- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html
		+	- https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html

← Older revision		Revision as of 01:45, 22 October 2021
Line 5:		Line 5:
	- https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-16-04		- https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-16-04
	- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04		- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04
		+
		+	https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html

← Older revision		Revision as of 01:41, 22 October 2021
Line 5:		Line 5:
	- https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-16-04		- https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-16-04
	- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04		- https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04
		+
		+
		+	```
		+	https://www.elastic.co/guide/en/logstash/current/installing-logstash.html
		+	```
		+
		+	vim conf.d/logstash.conf
		+	```
		+	input {
		+	syslog {
		+	port => 12345
		+	codec => cef
		+	syslog_field => "syslog"
		+	grok_pattern => "<%{POSINT:priority}>%{SYSLOGTIMESTAMP:timestamp} CUSTOM GROK HERE"
		+	}
		+	}
		+
		+	output {
		+	stdout {}
		+	file {
		+	path => "/tmp/output.txt"
		+	}
		+	}
		+	```
		+
		+	run command
		+	```
		+	/usr/share/logstash/bin/logstash -f logstash.conf
		+	```