Beast practice :) Since it takes so long for the monolithic logstash jar to start, I have started to add a back door in to all of my log stash configs. The following example shows me using a file in temp as a backdoor. If tcp 6501 seems off, I can dump data into the temp file to prove that the processing is still working, then we can diagnose th…

logstash_debug_input.cf

input{
  file {
    type => "custom_logger"
    format => plain
    path => "/tmp/debug_ls_input"
    tags => [ "debug","no_alert" ]
  }
  tcp {
  	type => "custom_logger"
		format => "plain"
		port => 6501
    tags => [ "no_alert" ]
  }
}