Example logging configuration for ElastAlert & Python-Logstash-Async

config.yaml

logging:
  version: 1
  incremental: false
  disable_existing_loggers: true
  formatters:
    logline:
      format: '%(asctime)s %(levelname)+8s %(name)+20s %(message)s'

    logstash_formatter:
      (): logstash_async.formatter.LogstashFormatter
      message_type: python-logstash
      fqdn: false
      extra_prefix: py
      extra:
        application: elastalert

  handlers:
    console:
      class: logging.StreamHandler
      formatter: logline
      level: DEBUG
      stream: ext://sys.stderr

    file:
      class : logging.FileHandler
      formatter: logline
      level: DEBUG
      filename: elastalert.log

    logstash:
      level: DEBUG
      class: logstash_async.handler.AsynchronousLogstashHandler
      formatter: logstash_formatter
      transport: logstash_async.transport.TcpTransport
      host: logstash.example.com
      port: 12345
      ssl_enable: true
      ssl_verify: true
      keyfile: logstash_cert.key
      certfile: logstash_cert.crt
      ca_certs: ca.crt
      database_path: logstash.db

  loggers:
      elastalert:
          level: INFO
          handlers: []
          propagate: true

      elasticsearch:
          level: WARN
          handlers: []
          propagate: true

      elasticsearch.trace:
          level: WARN
          handlers: []
          propagate: true

      '':  # root logger
        level: WARN
        handlers:
          - console
          - file
          - logstash
        propagate: false

is this ever worked ?

As far as I remember, yes.
This snippet was to demonstrate Yelp/elastalert#1293.