Working with custom plugins

edit

This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.

When running Logstash with plugins outside of those included in the standard Logstash distribution, you can install those plugins by creating a custom Docker image that includes the installed plugins, using the bin/logstash-plugin install utility to add further plugins to the image to enable them to be used by Logstash pods.

This sample Dockerfile installs the logstash-filter-tld and logstash-filter-elastic_integration plugins to the official Logstash Docker image:

FROM docker.elastic.co/logstash/logstash:8.17.0

RUN bin/logstash-plugin install logstash-filter-tld logstash-filter-elastic_integration

Then after building and deploying the custom image (refer to Create custom images for more details), include it in the Logstash manifest:

spec:
  count: 1
  version: {version} 
  image: <CUSTOM_IMAGE>

Providing the correct version is always required as ECK reasons about APIs and capabilities available to it based on the version field.