An input plugin enables a specific source of events to be read by Logstash.
The following input plugins are available below. For a list of Elastic supported plugins, please consult the Support Matrix.
Plugin |
Description |
Github repository |
Receives events from Azure Event Hubs |
||
Receives events from the Elastic Beats framework |
||
Pulls events from the Amazon Web Services CloudWatch API |
||
Streams events from CouchDB’s |
||
read events from Logstash’s dead letter queue |
||
Receives events from the Elastic Agent framework |
logstash-input-beats (shared) |
|
Accepts events from Elastic Serverless Forwarder |
||
Reads query results from an Elasticsearch cluster |
||
Captures the output of a shell command as an event |
||
Streams events from files |
||
Reads Ganglia packets over UDP |
||
Reads GELF-format messages from Graylog2 as events |
||
Generates random log events for test purposes |
||
Reads events from a GitHub webhook |
||
Extract events from files in a Google Cloud Storage bucket |
||
Consume events from a Google Cloud PubSub service |
||
Reads metrics from the |
||
Generates heartbeat events for testing |
||
Receives events over HTTP or HTTPS |
||
Decodes the output of an HTTP API into events |
||
Reads mail from an IMAP server |
||
Reads events from an IRC server |
||
Generates synthetic log events |
||
Reads events from standard input |
||
Creates events from JDBC data |
||
Reads events from a Jms Broker |
||
Retrieves metrics from remote Java applications over JMX |
||
Reads events from a Kafka topic |
||
Receives events through an AWS Kinesis stream |
||
Reads from Logstash output of another Logstash instance |
||
Reads events over a TCP socket from a Log4j |
||
Receives events using the Lumberjack protocl |
||
Captures the output of command line tools as an event |
||
Streams events from a long-running command pipe |
||
Receives facts from a Puppet server |
||
Pulls events from a RabbitMQ exchange |
||
Reads events from a Redis instance |
||
Receives RELP events over a TCP socket |
||
Captures the output of command line tools as an event |
||
Streams events from files in a S3 bucket |
||
Reads logs from AWS S3 buckets using sqs |
||
Creates events based on a Salesforce SOQL query |
||
Polls network devices using Simple Network Management Protocol (SNMP) |
||
Creates events based on SNMP trap messages |
||
Creates events based on rows in an SQLite database |
||
Pulls events from an Amazon Web Services Simple Queue Service queue |
||
Reads events from standard input |
||
Creates events received with the STOMP protocol |
||
Reads syslog messages as events |
||
Reads events from a TCP socket |
||
Reads events from the Twitter Streaming API |
||
Reads events over UDP |
||
Reads events over a UNIX socket |
||
Reads from the |
||
Reads events from a websocket |
||
Creates events based on the results of a WMI query |
||
Receives events over the XMPP/Jabber protocol |