Logstash Configuration Files

Logstash has two types of configuration files: pipeline configuration files, which define the Logstash processing pipeline, and settings files, which specify options that control Logstash startup and execution.

Pipeline Configuration Files

edit

You create pipeline configuration files when you define the stages of your Logstash processing pipeline. On deb and rpm, you place the pipeline configuration files in the /etc/logstash/conf.d directory. Logstash tries to load only files with .conf extension in the /etc/logstash/conf.d directory and ignores all other files.

See Configuring Logstash for more info.

Settings Files

edit

The settings files are already defined in the Logstash installation. Logstash includes the following settings files:

logstash.yml: Contains Logstash configuration flags. You can set flags in this file instead of passing the flags at the command line. Any flags that you set at the command line override the corresponding settings in the logstash.yml file. See logstash.yml for more info.
pipelines.yml: Contains the framework and instructions for running multiple pipelines in a single Logstash instance. See Multiple Pipelines for more info.
jvm.options: Contains JVM configuration flags. Use this file to set initial and maximum values for total heap space. You can also use this file to set the locale for Logstash. Specify each flag on a separate line. All other settings in this file are considered expert settings.
log4j2.properties: Contains default settings for log4j 2 library. See Log4j2 configuration for more info.
startup.options (Linux): Contains options used by the system-install script in /usr/share/logstash/bin to build the appropriate startup script for your system. When you install the Logstash package, the system-install script executes at the end of the installation process and uses the settings specified in startup.options to set options such as the user, group, service name, and service description. By default, Logstash services are installed under the user logstash. The startup.options file makes it easier for you to install multiple instances of the Logstash service. You can copy the file and change the values for specific settings. Note that the startup.options file is not read at startup. If you want to change the Logstash startup script (for example, to change the Logstash user or read from a different configuration path), you must re-run the system-install script (as root) to pass in the new settings.

« Logstash Directory Layout logstash.yml »