20191227_elastic_7.3.0-logstash-threads

logstash pipeline definition

input { 
  beats {
    port => 5044
    ssl => true
    ssl_certificate_authorities => [ "/usr/share/logstash/config/ca-chain.crt" ]
    ssl_certificate => "/usr/share/logstash/config/certificate.crt"
    ssl_key => "/usr/share/logstash/config/private.key"
    ssl_key_passphrase => ""
    ssl_verify_mode => "force_peer"
  }
}

filter { ... left out ... }

output {
  elasticsearch { 
    hosts => [ "elasticsearch:9200" ]
    sniffing => false
    manage_template => true
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{[@metadata][project]}-%{[@metadata][environment]}-%{[@metadata][application]}-%{+YYYY.MM.dd}"
    user => "${ES_USER}"
    password => "${ES_PASSWORD}"
    ssl => true
    ssl_certificate_verification => true
    cacert => "/usr/share/logstash/config/ca-chain.crt"
  }

  stdout { codec => json }
}

logstash.yml

http.host: "0.0.0.0"

path: 
  config: /usr/share/logstash/pipeline
  data: /usr/share/logstash/data

pipeline:
  workers: 3
  batch.size: 125

config:
  reload:
    automatic: true
    interval: 10s

xpack.monitoring:
  enabled: true
  elasticsearch:
    hosts: [ "https://elasticsearch:9200" ]
    ssl.certificate_authority: /usr/share/logstash/config/ca-chain.crt
    username: "${ES_USER}"
    password: "${ES_PASSWORD}"

log.level: info