#logstash

Hello

anybody here?

I'm new to logstash

is logstash capable of doing like an alert(email,sms and etc) whenever something wrong happens?

New news from newjiraissues: Serge Kovaleff created LOGSTASH-1839 - run "USE_JRUBY=1 bin/logstash" results in an error <https://logstash.jira.com/browse/LOGSTASH-1839>;

bandy: check here for the various outputs http://www.logstash.net/docs/1.3.3/ I haven't done the alet(email, etc) but it is on the list of thigns we will be using it for

Title: logstash - open source log management (at www.logstash.net)

thank you

sure :)

I would imagine some conditional statements that if matched add an 'alert' tag, and then more coniditionals in the output section that sent those with 'alert' tags to email, etc

s/conditional statements/grok filters/

yes, that's what I was thinking

@cully thanks

sure thing!

has anyone tried pulling out the version of kibana that bundled with the new marvel??? I like!

Evening everyone

I'm getting a 'failed to flush' error on my elasticsearch_http output. The reason is 'too many files open'. Any ideas on how to fix this from happening again?

Here is the gist: https://gist.github.com/anonymous/8679488

Title: gist:8679488 (at gist.github.com)

Well on the plus side log stash retained my failed 2 flush messages and sent them out after a service restart.

_cory: what's the open files limit for the logstash process?

tm23: what's the best way to figure out a per process fd limit?

tm23: my system has a limit of 205,430

usually the shell gives you something lame like 1024

ah ha, under /proc/[pid_number]/limits

it's set to 1024

So does log stash leak file descriptors?

I'm only monitoring around 50 logs.

electrical: hey are you still working on the rewrite of the logstash puppet module? I'd like to help. the current version doesn't seem to work with the new version I just installed and there are some things which could be better methinks :)

back

jkitchen: I wonder if he's still generating the module from reflecting the source