Logstash Downloads

Logstash is usually used to prepare the data before ingest to Elasticsearch. But Logstash has a lot of different input, filter and output plugins that can be used for various different use cases.

One use case could be to use Logstash as a script execution engine. This can be triggered via Watcher or Kibana Alerts and Actions to e.g. auto heal systems by restarting a machine. To achieve that Logstash needs to be able to accept Web Hook requests and decide based on the query parameters which script to execute.

Using this download you can make Logstash a REST endpoint that executes scripts or manually adds data in Elasticsearch.

Tested versions 7.14
ECS compliant

You must log in to submit a review.

Related downloads

Uptime watch using Heartbeat data

This watch checks the availability of your Heartbeat observed services. It will trigger an alert whenever at least one of your services is down.

Impossible travel transform job

Impossible travel detection by calculating the distance between two login locations in combination with the time between the two logins

Move to next ILM phase Watcher

This watcher job is moving specific indices based on e.g. disc usage into the next ILM phase.

Vega Clock UTC

This is a working clock visualization in UTC time.

PI Hole Logstash Pipeline and Dashboard

A filter for Logstash parsing PI-Hole logs + Dashboard to visualize the data

Logstash Meraki Pipeline

Logstash Pipeline to load Meraki logs via Syslog into Elasticsearch

These downloads could be also interesting for you

Logstash REST to exec scripts

Make Logstash a REST endpoint that executes scripts or manually adds data in Elasticsearch.

Logstash Pipeline for Talend ESB & MDM

A Logstash Pipeline to collect json logs from Talend ESB & MDM.

Logstash Meraki Pipeline

Logstash Pipeline to load Meraki logs via Syslog into Elasticsearch

PI Hole Logstash Pipeline and Dashboard

A filter for Logstash parsing PI-Hole logs + Dashboard to visualize the data

OpenSIEM Logstash Parsing

Logstash Parsing Configurations for Elastic SIEM parses many different sources into ECS