#logstash

so since I can't connect to it via the ES port

kibana will show no data?

hello I'm looking for some help/advice. I am trying to set up a kibana+logstash+elasticsearch to view logs for the company I work for. Are there any good tutorials you guys can recommend about setting up kibana+logstash+elasticsearch?

mistawright: logstash.net is a good start

mistawright: I would recommend starting with http://logstash.net/docs/1.1.13/tutorials/10-mi...

Title: logstash - open source log management (at logstash.net)

can someone help me with getting logstash running?

I am getting an exception when it starts up

Exception in thread "LogStash::Runner" org.jruby.exceptions.RaiseException: (NoM ethodError) undefined method `each' for nil:NilClass at RUBY.each(file:/C:/software/logstash/logstash-1.1.13-flatjar.jar!/log stash/config/file.rb:83) at RUBY.parse(file:/C:/software/logstash/logstash-1.1.13-flatjar.jar!/lo gstash/config/file.rb:39) at RUBY.parse_config(file:/C:/software/logstash/logstash-1.1.13-flatjar. jar!/l

I've got a question about groking

say that I match a specific tag to decide to grok something

then I have a bunch of different logs that are of interest, identified with patterns in that grok

and tons of logs that are not at all interesting

how can I add a tag only to logs that match the pattern?

because if I add a tag in the grok

it adds it to all of them

any assistance that anyone can offer would be greatly appreciated

Good evening. Where can I find some docs re best practice writing a plugin? More specifically I would like to write a Sensu output and was pondering how to set up a dev env - I'm just familiar with running it from a released .jar

So I would like to avoid packaging it everytime and running it instead 'unpackaged'

hmm

might be easiest to just run the non-jarred version

sounds good, where can I find that one? or just do a git clone and be done?

I feel like there's a non flat version

but I'm not having much luck finding info

ah nvm, rtfm helps :D Sounds like I jsut do a git clone. thanks :)

hi whack

can you take a look at this

cant spot a syntax error here

Title: Private Paste - Pastie (at pastie.org)

newlines...

to answer my own question, I can use grep to create tags for specific events that interest me, then I can process them with my grok

this page gave me the idea: http://cookbook.logstash.net/recipes/central-sy...

Title: parsing a central syslog server - logstash cookbook (at cookbook.logstash.net)

should work well I think