Skip to content

Instantly share code, notes, and snippets.

Avatar

akqopensystems

View GitHub Profile
View LS Log
[2019-05-15T14:33:51,686][INFO ][logstash.pipeline ] Starting pipeline {:pipeline_id=>"_10000-nw-syslogs_p001", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50}
[2019-05-15T14:33:54,747][INFO ][logstash.inputs.tcp ] Starting tcp input listener {:address=>"0.0.0.0:10000", :ssl_enable=>"false"}
[2019-05-15T14:33:54,752][INFO ][logstash.pipeline ] Pipeline started successfully {:pipeline_id=>"_10000-nw-syslogs_p001", :thread=>"#<Thread:0x34b84094@/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:47 run>"}
[2019-05-15T14:33:54,830][INFO ][logstash.inputs.udp ] Starting UDP listener {:address=>"0.0.0.0:10000"}
[2019-05-15T14:33:54,835][INFO ][logstash.inputs.udp ] UDP listener started {:address=>"0.0.0.0:10000", :receive_buffer_bytes=>"106496", :queue_size=>"2000"}
[2019-05-15T14:34:06,343][INFO ][logstash.agent ] Pipelines running {:count=>20, :running_pipelines=>[:"_10150-os-downstream_p066", :"_10104-os-beats_p015", :"_1
View gist:5fa1caff99135e3b279968fddbc9f67a
# syslog
input {
udp {
id => "udp_10000"
port => 10000
type => syslog_udp_10000
}
tcp {
id => "tcp_10000"
port => 10000