Windows Event Config for Logstash

logstash.bat

C:

cd C:\logstash

 

set HOME=c:/logstash/sincedb

 

"C:\Program Files (x86)\Java\jre7\bin\java.exe" -Xmx32M -jar logstash-1.2.1-flatjar.jar agent --config logstash.conf --log logstash.log

logstash.conf

input {
  eventlog {
    type => 'Win32-EventLog'
    logfile=> 'Application'
  }

  eventlog {
    type => 'Win32-EventLog'
    logfile=> 'Security'          
  }

  eventlog {
    type => 'Win32-EventLog'
    logfile=> 'System'           
  }
}
 
output {
   redis {
    host => "<SOME-REDIS-SERVER>"
    data_type => "list"
    key => "logstash"
  }
}