solr_http
editsolr_http
editThis is a community-maintained plugin! It does not ship with Logstash by default, but it is easy to install by running bin/plugin install logstash-output-solr_http
.
This output lets you index&store your logs in Solr. If you want to get started quickly you should use version 4.4 or above in schemaless mode, which will try and guess your fields automatically. To turn that on, you can use the example included in the Solr archive:
tar zxf solr-4.4.0.tgz cd example mv solr solr_ #back up the existing sample conf cp -r example-schemaless/solr/ . #put the schemaless conf in place java -jar start.jar #start Solr
You can learn more at the Solr home page
Synopsis
editThis plugin supports the following configuration options:
Required configuration options:
solr_http { }
Available configuration options:
Setting | Input type | Required | Default value |
---|---|---|---|
No |
|
||
No |
|
||
No |
|
||
No |
|
||
No |
|
||
No |
|
Details
edit
codec
edit- Value type is codec
-
Default value is
"plain"
The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.
document_id
edit- Value type is string
-
Default value is
nil
Solr document ID for events. You’d typically have a variable here, like %{foo} so you can assign your own IDs
exclude_tags
(DEPRECATED)
edit- DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
- Value type is array
-
Default value is
[]
Only handle events without any of these tags. Optional.
flush_size
edit- Value type is number
-
Default value is
100
Number of events to queue up before writing to Solr
idle_flush_time
edit- Value type is number
-
Default value is
1
Amount of time since the last flush before a flush is done even if the number of buffered events is smaller than flush_size
solr_url
edit- Value type is string
-
Default value is
"http://localhost:8983/solr"
URL used to connect to Solr
tags
(DEPRECATED)
edit- DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
- Value type is array
-
Default value is
[]
Only handle events with all of these tags. Optional.
type
(DEPRECATED)
edit- DEPRECATED WARNING: This configuration item is deprecated and may not be available in future versions.
- Value type is string
-
Default value is
""
The type to act on. If a type is given, then this output will only
act on messages with the same type. See any input plugin’s type
attribute for more.
Optional.