July 2017
Intermediate to advanced
374 pages
8h
English
Logstash needs to be installed on the server from where the logs need to be collected and are shipped across to Elasticsearch to create indexes.
Once you have installed Logstash, it is recommended to configure your logstash.conf file, which is located at /etc/logstash, with details such as Logstash log's file rotation (that is /var/log/logstash/*.stdout, *.err, or *.log) or a suffix format, such as data format. The following code block is a template for your reference:
# see "man logrotate" for details # number of backlogs to keep rotate 7 # create new (empty) log files after rotating old ones create # Define suffix format dateformat -%Y%m%d-%s # use date as a suffix of the rotated file dateext # uncomment this if you want your ...