IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« elasticsearch file »
Elastic Docs ›Logstash Reference [1.5] ›Logstash Reference ›Output plugins

exec

edit

exec

edit

This output will run a command for any matching event. Example:

    output {
      exec {
        type => abuse
        command => "iptables -A INPUT -s %{clientip} -j DROP"
      }
    }

Run subprocesses via system ruby function

if you want it non-blocking you should use & or dtach or other such techniques

 

Synopsis

edit

This plugin supports the following configuration options:

Required configuration options:

exec {
    command => ...
}

Available configuration options:

Setting Input type Required Default value

codec

codec

No

"plain"

command

string

Yes

workers

number

No

1

Details

edit

 

codec

edit
  • Value type is codec
  • Default value is "plain"

The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.

command

edit
  • This is a required setting.
  • Value type is string
  • There is no default value for this setting.

Command line to execute via subprocess. Use dtach or screen to make it non blocking

exclude_tags (DEPRECATED)

edit
  • DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
  • Value type is array
  • Default value is []

Only handle events without any of these tags. Optional.

tags (DEPRECATED)

edit
  • DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
  • Value type is array
  • Default value is []

Only handle events with all of these tags. Optional.

type (DEPRECATED)

edit
  • DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
  • Value type is string
  • Default value is ""

The type to act on. If a type is given, then this output will only act on messages with the same type. See any input plugin’s type attribute for more. Optional.

workers

edit
  • Value type is number
  • Default value is 1

The number of workers to use for this output. Note that this setting may not be useful for all outputs.

« elasticsearch file »