- Logstash Reference: other versions:
- Logstash Introduction
- Getting Started with Logstash
- Breaking Changes
- Upgrading Logstash
- Configuring Logstash
- Performance Troubleshooting Guide
- Working with plugins
- Input plugins
- beats
- couchdb_changes
- drupal_dblog
- elasticsearch
- exec
- eventlog
- file
- ganglia
- gelf
- generator
- graphite
- github
- heartbeat
- heroku
- http
- http_poller
- irc
- imap
- jdbc
- jmx
- kafka
- log4j
- lumberjack
- meetup
- pipe
- puppet_facter
- relp
- rss
- rackspace
- rabbitmq
- redis
- salesforce
- snmptrap
- stdin
- sqlite
- s3
- sqs
- stomp
- syslog
- tcp
- unix
- udp
- varnishlog
- wmi
- websocket
- xmpp
- zenoss
- zeromq
- Output plugins
- boundary
- circonus
- csv
- cloudwatch
- datadog
- datadog_metrics
- elasticsearch
- elasticsearch_java
- exec
- file
- google_bigquery
- google_cloud_storage
- ganglia
- gelf
- graphtastic
- graphite
- hipchat
- http
- irc
- influxdb
- juggernaut
- jira
- kafka
- lumberjack
- librato
- loggly
- mongodb
- metriccatcher
- nagios
- null
- nagios_nsca
- opentsdb
- pagerduty
- pipe
- riemann
- redmine
- rackspace
- rabbitmq
- redis
- riak
- s3
- sqs
- stomp
- statsd
- solr_http
- sns
- syslog
- stdout
- tcp
- udp
- webhdfs
- websocket
- xmpp
- zabbix
- zeromq
- Filter plugins
- aggregate
- alter
- anonymize
- collate
- csv
- cidr
- clone
- cipher
- checksum
- date
- de_dot
- dns
- drop
- elasticsearch
- extractnumbers
- environment
- elapsed
- fingerprint
- geoip
- grok
- i18n
- json
- json_encode
- kv
- mutate
- metrics
- multiline
- metaevent
- prune
- punct
- ruby
- range
- syslog_pri
- sleep
- split
- throttle
- translate
- uuid
- urldecode
- useragent
- xml
- zeromq
- Codec plugins
- Contributing to Logstash
- How to write a Logstash input plugin
- How to write a Logstash input plugin
- How to write a Logstash codec plugin
- How to write a Logstash filter plugin
- Contributing a Patch to a Logstash Plugin
- Logstash Plugins Community Maintainer Guide
- Submitting your plugin to RubyGems.org and the logstash-plugins repository
- Glossary of Terms
- Release Notes
An output plugin sends event data to a particular destination. Outputs are the final stage in the event pipeline.
The following output plugins are available:
Plugin |
Description |
Github repository |
Sends annotations to Boundary based on Logstash events |
||
Sends annotations to Circonus based on Logstash events |
||
Writes events to disk in a delimited format |
||
Aggregates and sends metric data to AWS CloudWatch |
||
Sends events to DataDogHQ based on Logstash events |
||
Sends metrics to DataDogHQ based on Logstash events |
||
Sends email to a specified address when output is received |
||
Stores logs in Elasticsearch |
||
Stores logs in Elasticsearch using the |
||
Runs a command for a matching event |
||
Writes events to files on disk |
||
Writes events to Google BigQuery |
||
Writes events to Google Cloud Storage |
||
Writes metrics to Ganglia’s |
||
Generates GELF formatted output for Graylog2 |
||
Sends metric data on Windows |
||
Writes metrics to Graphite |
||
Writes events to HipChat |
||
Sends events to a generic HTTP or HTTPS endpoint |
||
Writes events to IRC |
||
Writes metrics to InfluxDB |
||
Pushes messages to the Juggernaut websockets server |
||
Writes strutured JSON events to JIRA |
||
Writes events to a Kafka topic |
||
Sends events using the |
||
Sends metrics, annotations, and alerts to Librato based on Logstash events |
||
Ships logs to Loggly |
||
Writes events to MongoDB |
||
Writes metrics to MetricCatcher |
||
Sends passive check results to Nagios |
||
Sends passive check results to Nagios using the NSCA protocol |
||
A null output for testing |
||
Writes metrics to OpenTSDB |
||
Sends notifications based on preconfigured services and escalation policies |
||
Pipes events to another program’s standard input |
||
Sends metrics to Riemann |
||
Creates tickets using the Redmine API |
||
Sends events to a Rackspace Cloud Queue service |
||
Pushes events to a RabbitMQ exchange |
||
Sends events to a Redis queue using the |
||
Writes events to the Riak distributed key/value store |
||
Sends Logstash events to the Amazon Simple Storage Service |
||
Pushes events to an Amazon Web Services Simple Queue Serice queue |
||
Writes events using the STOMP protocol |
||
Sends metrics using the |
||
Stores and indexes logs in Solr |
||
Sends events to Amazon’s Simple Notification Service |
||
Sends events to a |
||
Prints events to the standard output |
||
Writes events over a TCP socket |
||
Sends events over UDP |
||
Sends Logstash events to HDFS using the |
||
Publishes messages to a websocket |
||
Posts events over XMPP |
||
Sends events to a Zabbix server |
||
Writes events to a ZeroMQ PUB socket |