Create logstash.conf

Added a default "Logstash.conf" as example and so logstash can actually run once you compile the rpm.
This commit is contained in:
Sjir Bagmeijer 2013-09-30 18:02:35 +02:00
parent 9f6257ed53
commit 130bd6f79f

View file

@ -0,0 +1,26 @@
### THIS IS A EXAMPLE CONFIG SO LOGSTASH WILL RUN ###
### PLEASE UPDATE THIS TO WHATEVER YOU WANT TO USE ###
input {
syslog {
type => syslog
port => 5544
}
}
filter {
mutate {
add_field => [ "hostip", "%{host}" ]
}
dns {
reverse => [ "host" ]
action => "replace"
}
}
output {
elasticsearch {
host => "localhost"
}
}