#logstash

oops that's invalid

let me keep trying a basic config. although my old config was working in the past

i did a --configtest and it said Configuration OK

when i run logstash in the foreground, it works, but I cannot CTRL+C out of it. It says "Sending shutdown signal to input thread" and just sits there.

<http://tinyurl.com/lfontkz>; (at github.com)

I hope i can ask this ? where it makes sense, but what is the best High Availabilty solution for logstash? I've read about redis, rabbitmq, and lumberjack/logstash-forwarder. I read the document saying that logstash uses a version of rabbitmq (bunny)...does that mean it has HA built in, or does that still mean you would need a seperate install of rabbitmq or some other broker? Can logstash-forwarder be a

replacement for the systems like redis, rabbitmq..etc.?

Can someone help me get started with converting dates from epoch to a readable format? I've got this so far: http://pastebin.com/khMw63P4

Title: filter { if [type] == "squid-access" { grok { match => { "message - Pastebin.com (at pastebin.com)

where would I put the date part in the config?

whack: can you by chance ban olivi____ joins/quits are really annoying :(