Logstash - transport and process your logs, events, or other data
Find a file
Jordan Sissel 384c8a97cc - Make '-vvv' no longer set $DEBUG (ruby global). Setting $DEBUG = true
causes ruby to log all exceptions, caught or otherwise (or something),
  and this was tripping up users causing them to report false bugs.
  To get the $DEBUG behavior again, you can now set RUBY_DEBUG=1 in
  your environment.
2012-08-16 11:58:00 -07:00
bin - don't hardcode jruby 2012-02-02 08:31:59 -08:00
docs Document comment feature 2012-08-16 11:53:23 -07:00
etc Correcting grep config in nagios doc/example 2012-07-10 09:44:02 +02:00
lib - Make '-vvv' no longer set $DEBUG (ruby global). Setting $DEBUG = true 2012-08-16 11:58:00 -07:00
misc - add some pipeline ideas related to the big logstash agent refactor. 2012-05-24 01:17:43 -07:00
patterns Add FATAL loglevel to grok pattern 2012-08-14 12:36:50 -07:00
screencast 2010-11-11 07:37:48 +00:00
src/net/logstash - variables, use them. 2011-08-22 01:10:09 -07:00
test - fix uppercase/lowercase bug where arrays would not be considered 2012-08-10 10:30:25 -07:00
.gitignore Gemfile.lock should stay versioned 2012-02-09 13:50:21 -07:00
.travis.yml Enabled LogStash to be built and tested on the Travis-CI Platform (travis-ci.org) 2012-02-09 13:23:34 -07:00
CHANGELOG update changelog for mutate filter fix 2012-08-10 10:32:05 -07:00
CONTRIBUTORS Add clstokes 2012-07-17 16:55:41 -07:00
Gemfile set gemspec name now that there are multiple 2012-08-16 11:53:24 -07:00
Gemfile.lock add gemspec and use it in Gemfile 2012-07-12 15:22:04 -07:00
LICENSE update copyright years 2011-02-19 11:45:52 -08:00
logstash-event.gemspec First stab at logstash-event gemspec 2012-07-29 18:39:48 +01:00
logstash.gemspec add gemspec and use it in Gemfile 2012-07-12 15:22:04 -07:00
Makefile ignore threadable and helper files under inputs/ganglia/ 2012-07-16 06:43:35 -04:00
README.md - no more 'make gem' WOOHOO 2012-06-27 22:17:18 -07:00
STYLE.md - update logging style to reflect new awesomeness given by the cabin 2012-01-13 18:47:14 -08:00

logstash

Build Status

logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, logstash comes with a web interface for searching and drilling into all of your logs.

It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.

For more info, see http://logstash.net/

Building

jar releases are available here: http://semicomplete.com/files/logstash/ If you want to build the jar yourself, run:

make jar

rpm, deb, or other package formats are not currently available, but are easy to build with fpm. If you are interested in seeing future releases include your favorite packaging format, please let me know.

Contributing

All contributions are welcome: ideas, patches, documentation, bug reports, complaints, and even something you drew up on a napkin.

Programming is not a required skill. Whatever you've seen about open source and maintainers or community members saying "send patches or die" - you will not see that here.

It is more important to me that you are able to contribute.

That said, some basic guidelines, which you are free to ignore :)

  • Have a problem you want logstash to solve for you? You can email the mailing list, or join the IRC channel #logstash on irc.freenode.org, or email me personally (jls@semicomplete.com)
  • Have an idea or a feature request? File a ticket on jira, or email the mailing list, or email me personally (jls@semicomplete.com) if that is more comfortable.
  • If you think you found a bug, it probably is a bug. File it on jira or send details to the mailing list.
  • If you want to send patches, best way is to fork this repo and send me a pull request. If you don't know git, I also accept diff(1) formatted patches - whatever is most comfortable for you.
    • DO NOT MODIFY Gemfile.lock IN YOUR PULL REQUESTS. THIS WILL CAUSE MERGE FAILURES.
  • Want to lurk about and see what others are doing? IRC (#logstash on irc.freenode.org) is a good place for this as is the mailing list