#logstash

Hello All

god it works!

thanks semiosis for the gists

althought i don't understand why it did not work before

yay, Kibana 3 site first draft done: http://three.kibana.org/

Title: Kibana 3 (at three.kibana.org)

cool

looks good, rashidkpc

imo it'd be sweet if you could insert some graphite graphs in there

i can't explain why

everything is more awesome with more graphite

I've been shaving pencils into my morning coffee

heh

heh

just saeems it'd be pretty simple to add in, you define url and like %{starttime} or something to send to graphite

I'm got hardware on the way to my datacenter now to get logstash/ES/kibana going there

adding a graphite panel to Kibana3 would be trivial

right.

I'll do it at some point

good size project for Monitorama hackday :)

doesn't even seem it'd be that much to do

tell you what, someone brings a functional graphite installation with data in it to Monitorama, I'll make a panel

heh

seeing as how jdixon is organizing monitorama, I'd be -shocked- if there wasn't one.

20:23:20 < mortini_> jdixon: are you going to monitorama?

rashidkpc: I could probably clone mine, it's smallish, 12k metrics a minute, and I don't keep full resolution all that long

jdixon: rashidkpc that works on kibana was looking for some graphite data

crap

good work rashidkpc

is there any variable in logstash that refers to the output of a multine filter? grok variable only refers to pre-multiline content...

(trying to do a mutate on log message after a multiline, the mutate only affects the first line)

good night everyone

sz: you there?

Yeah, I am here

rashidkpc: arguably, the ability to add any webpage that you could put in the %{date} and whatever other wildcards would be pretty neat too - you could add graphite into it, or some other app.

i pinged jdixon anyways, he said he wasn't going. something about a terrible organizer :D

test

ICLES

New news from newjiraissues: John E. Vincent created LOGSTASH-336 - Investigate moving from Bunny to a Java AMQP library <https://logstash.jira.com/browse/LOGSTASH-336>; || Jordan Sissel created LOGSTASH-170 - AMQP input appears to have slowness problems. <https://logstash.jira.com/browse/LOGSTASH-170>;

whack: stud doesn't have a license, is it ap 2.0?

New news from newjiraissues: John E. Vincent created LOGSTASH-389 - Add TLS support to AMQP outputs <https://logstash.jira.com/browse/LOGSTASH-389>;

hi whack

if i wanted to add kibana to my logstash->greylog setup, all I need is an output for es right

and install kibana

can my graylog and logstash share one instance of a centralized ES for now>

?

thinking is i will be picking one or the other

if ES is shared, are kibana and graylog in separate namespaces within es>

?

i think it's probable. i don't know for sure. logstash puts it's indexes/docs in it's own namespace, bascially

cool

and do you know if this is "kibana 3" https://github.com/rashidkpc/Kibana

?

Title: rashidkpc/Kibana · GitHub (at github.com)

no

is it available to the public>

?

https://github.com/elasticsearch/kibana3 <-

Title: elasticsearch/kibana3 · GitHub (at github.com)

thanks

hmm theres no install guide at all

it's pretty simple, just put in some www directory