mirror of https://github.com/VictoriaMetrics/VictoriaMetrics.git synced 2024-12-24 19:30:06 +01:00

History

Artem Navoiev b024e46284 Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker) Signed-off-by: Artem Navoiev <tenmozes@gmail.com>		2023-06-21 03:59:31 -07:00
..
docker-compose.yml	Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker)	2023-06-21 03:59:31 -07:00
Dockerfile	Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker)	2023-06-21 03:59:31 -07:00
logstash.yml	Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker)	2023-06-21 03:59:31 -07:00
pipeline.conf	Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker)	2023-06-21 03:59:31 -07:00
README.md	Add docker compose examples: filebeat(docker, syslog), fluentbit(docker), logstash, vector(docker)	2023-06-21 03:59:31 -07:00

README.md

How to set up sending logs to VictoriaLogs from logstash

It is required to use OpenSearch plugin for output configuration. Plugin can be installed by using the following command:

bin/logstash-plugin install logstash-output-opensearch

OpenSearch plugin is required because elasticsearch output plugin performs various checks for Elasticsearch version and license which are not applicable for VictoriaLogs.

Here is an example of logstash configuration:

  opensearch {
    hosts => ["http://victorialogs:9428/insert/elasticsearch"]
    custom_headers => {
        "AccountID" => "0"
        "ProjectID" => "0"
    }
    parameters => {
        "_stream_fields" => "host.ip,process.name"
        "_msg_field" => "message"
        "_time_field" => "@timestamp"
    }
  }

Please, note that _stream_fields parameter must follow recommended best practices to achieve better performance.