loggly
editloggly
editThis is a community-maintained plugin! It does not ship with Logstash by default, but it is easy to install by running bin/plugin install logstash-output-loggly
.
Got a loggly account? Use logstash to ship logs to Loggly!
This is most useful so you can use logstash to parse and structure your logs and ship structured, json events to your account at Loggly.
To use this, you’ll need to use a Loggly input with type http and json logging enabled.
Synopsis
editThis plugin supports the following configuration options:
Required configuration options:
loggly { key => ... }
Available configuration options:
Setting | Input type | Required | Default value |
---|---|---|---|
No |
|
||
No |
|
||
Yes |
|||
No |
|
||
No |
|||
No |
|
||
No |
|||
No |
|||
No |
|
||
No |
|
Details
edit
codec
edit- Value type is codec
-
Default value is
"plain"
The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.
host
edit- Value type is string
-
Default value is
"logs-01.loggly.com"
The hostname to send logs to. This should target the loggly http input server which is usually "logs-01.loggly.com" (Gen2 account). See Loggly HTTP endpoint documentation at https://www.loggly.com/docs/http-endpoint/
key
edit- This is a required setting.
- Value type is string
- There is no default value for this setting.
The loggly http input key to send to. This is usually visible in the Loggly Inputs page as something like this:
https://logs.hoover.loggly.net/inputs/abcdef12-3456-7890-abcd-ef0123456789 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ \----------> key <-------------/
You can use %{foo}
field lookups here if you need to pull the api key from
the event. This is mainly aimed at multitenant hosting providers who want
to offer shipping a customer’s logs to that customer’s loggly account.
proto
edit- Value type is string
-
Default value is
"http"
Should the log action be sent over https instead of plain http
tag
edit- Value type is string
-
Default value is
"logstash"
Loggly Tag Tag helps you to find your logs in the Loggly dashboard easily You can make a search in Loggly using tag as "tag:logstash-contrib" or the tag set by you in the config file.
You can use %{somefield} to allow for custom tag values. Helpful for leveraging Loggly source groups. https://www.loggly.com/docs/source-groups/