Installing Logstash
editInstalling Logstash
editLogstash requires Java 7 or later. Use the official Oracle distribution or an open-source distribution such as OpenJDK.
To check your Java version, run the following command:
java -version
On systems with Java installed, this command produces output similar to the following:
java version "1.7.0_45" Java(TM) SE Runtime Environment (build 1.7.0_45-b18) Java HotSpot(TM) 64-Bit Server VM (build 24.45-b08, mixed mode)
Installing from a Downloaded Binary
editDownload the Logstash installation file that matches your host environment. Unpack the file. Do not install Logstash into a directory path that contains colon (:) characters.
On supported Linux operating systems, you can use a package manager to install Logstash.
Installing from Package Repositories
editWe also have repositories available for APT and YUM based distributions. Note that we only provide binary packages, but no source packages, as the packages are created as part of the Logstash build.
We have split the Logstash package repositories by version into separate urls to avoid accidental upgrades across major or minor versions. For all 2.4.x releases use 2.4 as version number, for 2.3.x use 2.3, and so on.
We use the PGP key D88E42B4, Elastic’s Signing Key, with fingerprint
4609 5ACC 8548 582C 1A26 99A9 D27D 666C D88E 42B4
to sign all our packages. It is available from https://pgp.mit.edu.
APT
editDownload and install the Public Signing Key:
wget -qO - https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -
Add the repository definition to your /etc/apt/sources.list
file:
echo "deb https://packages.elastic.co/logstash/2.4/debian stable main" | sudo tee -a /etc/apt/sources.list
Use the echo
method described above to add the Logstash repository. Do not
use add-apt-repository
as it will add a deb-src
entry as well, but we do not
provide a source package. If you have added the deb-src
entry, you will see an
error like the following:
Unable to find expected entry 'main/source/Sources' in Release file (Wrong sources.list entry or malformed file)
Just delete the deb-src
entry from the /etc/apt/sources.list
file and the
installation should work as expected.
Run sudo apt-get update
and the repository is ready for use. You can install
it with:
sudo apt-get update && sudo apt-get install logstash
YUM
editDownload and install the public signing key:
rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch
Add the following in your /etc/yum.repos.d/
directory
in a file with a .repo
suffix, for example logstash.repo
[logstash-2.4] name=Logstash repository for 2.4.x packages baseurl=https://packages.elastic.co/logstash/2.4/centos gpgcheck=1 gpgkey=https://packages.elastic.co/GPG-KEY-elasticsearch enabled=1
And your repository is ready for use. You can install it with:
yum install logstash