- Logstash Reference: other versions:
- Logstash Reference
- Logstash Introduction
- Getting Started with Logstash
- Package Repositories
- Configuring Logstash
- Working with plugins
- Contributing to Logstash
- Input plugins
- beats
- couchdb_changes
- drupal_dblog
- elasticsearch
- exec
- eventlog
- file
- ganglia
- gelf
- generator
- graphite
- github
- heartbeat
- heroku
- http
- http_poller
- irc
- imap
- jdbc
- jmx
- kafka
- log4j
- lumberjack
- meetup
- pipe
- puppet_facter
- relp
- rss
- rackspace
- rabbitmq
- redis
- salesforce
- snmptrap
- stdin
- sqlite
- s3
- sqs
- stomp
- syslog
- tcp
- unix
- udp
- varnishlog
- wmi
- websocket
- xmpp
- zenoss
- zeromq
- Output plugins
- boundary
- circonus
- csv
- cloudwatch
- datadog
- datadog_metrics
- elasticsearch
- exec
- file
- google_bigquery
- google_cloud_storage
- ganglia
- gelf
- graphtastic
- graphite
- hipchat
- http
- irc
- influxdb
- juggernaut
- jira
- kafka
- lumberjack
- librato
- loggly
- mongodb
- metriccatcher
- nagios
- null
- nagios_nsca
- opentsdb
- pagerduty
- pipe
- riemann
- redmine
- rackspace
- rabbitmq
- redis
- riak
- s3
- sqs
- stomp
- statsd
- solr_http
- sns
- syslog
- stdout
- tcp
- udp
- webhdfs
- websocket
- xmpp
- zabbix
- zeromq
- Filter plugins
- aggregate
- alter
- anonymize
- collate
- csv
- cidr
- clone
- cipher
- checksum
- date
- dns
- drop
- elasticsearch
- extractnumbers
- environment
- elapsed
- fingerprint
- geoip
- grok
- i18n
- json
- json_encode
- kv
- mutate
- metrics
- multiline
- metaevent
- prune
- punct
- ruby
- range
- syslog_pri
- sleep
- split
- throttle
- translate
- uuid
- urldecode
- useragent
- xml
- zeromq
- Codec plugins
IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
Command-line flags
editCommand-line flags
editLogstash has the following flags. You can use the --help
flag to display this information.
-f, --config CONFIGFILE Load the Logstash config from a specific file, directory, or a wildcard. If given a directory or wildcard, config files will be read from the directory in alphabetical order. -e CONFIGSTRING Use the given string as the configuration data. Same syntax as the config file. If not input is specified, 'stdin { type => stdin }' is default. If no output is specified, 'stdout { codec => rubydebug }}' is default. -w, --filterworkers COUNT Sets the number of filter workers to run (default: 1) --watchdog-timeout TIMEOUT Set watchdog timeout value in seconds. Default is 10. This timeout is used to detect stuck filters; stuck filters usually symptoms of bugs. When a filter takes longer than TIMEOUT seconds, it will cause Logstash to abort. -l, --log FILE Log to a given path. Default is to log to stdout --verbose Increase verbosity to the first level (info), less verbose. --debug Increase verbosity to the last level (trace), more verbose. -V, --version Display the version of Logstash. -p, --pluginpath A path of where to find plugins. This flag can be given multiple times to include multiple paths. Plugins are expected to be in a specific directory hierarchy: 'PATH/logstash/TYPE/NAME.rb' where TYPE is 'inputs' 'filters', 'outputs' or 'codecs' and NAME is the name of the plugin. -t, --configtest Checks configuration and then exit. Note that grok patterns are not checked for correctness with this flag -h, --help Print help -v *DEPRECATED: see --verbose/debug* Increase verbosity. There are multiple levels of verbosity available with '-vv' currently being the highest
Was this helpful?
Thank you for your feedback.