#logstash

If i just want to forward logs by having input tcp and ouput tcp, what should the outpuc codec be? I would like to only have the message field in the ouput so that it remains exactly same.

Morning all. Does anyone have ideas on how to handle this. I've a logs with metrics that have 3 consecutive lines with the same pattern. I would only need to keep and analyze the last line. Does anybody knows how do it?

Hello, how do I find out what part of my logstash pipeline is blocking? :message=>"Lumberjack input: The circuit breaker has detected a slowdown or stall in the pipeline

casimirextreme: Simple approach would be to use the same grok pattern 3 times but only name it the last time

it should only pick up the named pattern

hello, should i have a index pattern per application group, per-application or per-tier-per-application?

indeed thx for the suggestion tilmans

hi everyone

what should I look into if I want to speed up my logstash-forwarder and logstash-shipper?

seems like my lsf is able to do 1024/1s events on average and not much more

I tried increasing -spool-size to 2000, but then it was doing 2000/2s events on average

hi, I'm using the rabbitmq output plugin. I want to enable an ssl connection from Logstash to RabbitMQ, I have set up the ssl settings in RabbitMQ but how do I setup the logstash ssl settings? where to place the path to the client cert etc.?

anyone?