logstash-plugin configure index

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
6 messages Options
iob
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

logstash-plugin configure index

iob
i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: logstash-plugin configure index

Josh Miller
You would want to define the index in the output section of logstash.config, i.e.:

output {
    elasticsearch {
        hosts => [host"]
        index => “logstash-logs-%{+YYYY.MM.dd}"
    }   

}




HTH,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
https://itsecureadmin.com/

On Mar 17, 2017, at 7:24 AM, iob <[hidden email]> wrote:

i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/5A7566F7-B259-46C2-B9B4-AD142BE03427%40itsecureadmin.com.
For more options, visit https://groups.google.com/d/optout.
iob
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: logstash-plugin configure index

iob
yeah but what should I give to the jenkins' logstash-plugin. i have configured as logstash-%{+YYYY.MM.dd}/jenkins now. Although i cant see anything when I search for type:jenkins

On Friday, March 17, 2017 at 2:28:25 PM UTC, Josh Miller wrote:
You would want to define the index in the output section of logstash.config, i.e.:

output {
    elasticsearch {
        hosts => [host"]
        index => “logstash-logs-%{+YYYY.MM.dd}"
    }   

}


RE:  <a href="https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg&#39;;return true;">https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index


HTH,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;">https://itsecureadmin.com/

On Mar 17, 2017, at 7:24 AM, iob <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="zV2cs4s7BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">jbona...@...> wrote:

i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="zV2cs4s7BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium=email&amp;utm_source=footer" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;">https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;">https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: logstash-plugin configure index

Josh Miller
When you say you have it configured, do you mean the “key” field?  I have found that you do not need to set that.  To send the output of Jenkins jobs to logstash, only set:

Jenkins -> Manage Jenkins -> Logstash
1. indexer type to ‘syslog’
2. hostname to logstash
3. port to $logstash_port

If you have a lot of output going to logstash, you might have json parse errors which would prevent proper indexing to elasticsearch.  Check the records in elasticsearch around the time that you would expect to see the Jenkins output as it might not be typed properly.  One way to troubleshoot this is to set the max lines from the job going to logstash to something small, like 5, and then check to see if you are sending data properly.  Also, be sure to use the post build action to send output to logstash.

Best,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
https://itsecureadmin.com/

On Mar 17, 2017, at 8:04 AM, iob <[hidden email]> wrote:

yeah but what should I give to the jenkins' logstash-plugin. i have configured as logstash-%{+YYYY.MM.dd}/jenkins now. Although i cant see anything when I search for type:jenkins

On Friday, March 17, 2017 at 2:28:25 PM UTC, Josh Miller wrote:
You would want to define the index in the output section of logstash.config, i.e.:

output {
    elasticsearch {
        hosts => [host"]
        index => “logstash-logs-%{+YYYY.MM.dd}"
    }   

}


RE:  <a href="https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index" target="_blank" rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg';return true;" onclick="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg';return true;" class="">https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index


HTH,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" target="_blank" rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" onclick="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" class="">https://itsecureadmin.com/

On Mar 17, 2017, at 7:24 AM, iob <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="zV2cs4s7BwAJ" rel="nofollow" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;" class="">jbona...@...> wrote:

i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="zV2cs4s7BwAJ" rel="nofollow" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;" class="">jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium=email&amp;utm_source=footer" target="_blank" rel="nofollow" onmousedown="this.href='https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" onclick="this.href='https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" class="">https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href='https://groups.google.com/d/optout';return true;" onclick="this.href='https://groups.google.com/d/optout';return true;" class="">https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/EC657015-4812-4C77-A80D-7AEDC49E7816%40itsecureadmin.com.
For more options, visit https://groups.google.com/d/optout.
iob
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: logstash-plugin configure index

iob
@Josh thanks a lot from your help so far.

I assume that you mean Jenkins -> Manage Jenkins -> Global Tool Configuration -> Logstash Plugin. Which in this case yes i mean the key. Also I noticed that you suggest indexer type to ‘syslog’ but i have to elasticsearch as I want to push directly to elastic. I am going to try what you suggest. But I wonder whether we do need to give the "key"?



On Friday, March 17, 2017 at 3:17:09 PM UTC, Josh Miller wrote:
When you say you have it configured, do you mean the “key” field?  I have found that you do not need to set that.  To send the output of Jenkins jobs to logstash, only set:

Jenkins -> Manage Jenkins -> Logstash
1. indexer type to ‘syslog’
2. hostname to logstash
3. port to $logstash_port

If you have a lot of output going to logstash, you might have json parse errors which would prevent proper indexing to elasticsearch.  Check the records in elasticsearch around the time that you would expect to see the Jenkins output as it might not be typed properly.  One way to troubleshoot this is to set the max lines from the job going to logstash to something small, like 5, and then check to see if you are sending data properly.  Also, be sure to use the post build action to send output to logstash.

Best,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;">https://itsecureadmin.com/

On Mar 17, 2017, at 8:04 AM, iob <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="yiLVgTQ-BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">jbona...@...> wrote:

yeah but what should I give to the jenkins' logstash-plugin. i have configured as logstash-%{+YYYY.MM.dd}/jenkins now. Although i cant see anything when I search for type:jenkins

On Friday, March 17, 2017 at 2:28:25 PM UTC, Josh Miller wrote:
You would want to define the index in the output section of logstash.config, i.e.:

output {
    elasticsearch {
        hosts => [host"]
        index => “logstash-logs-%{+YYYY.MM.dd}"
    }   

}


RE:  <a href="https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg&#39;;return true;">https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index


HTH,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A&#39;;return true;">https://itsecureadmin.com/

On Mar 17, 2017, at 7:24 AM, iob <[hidden email]> wrote:

i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium=email&amp;utm_source=footer" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;">https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;">https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="yiLVgTQ-BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium=email&amp;utm_source=footer" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter&#39;;return true;">https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/optout&#39;;return true;">https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/ec8ce47d-6e76-40be-9225-b2b42570276c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: logstash-plugin configure index

Josh Miller
Ok, I typically send through logstash, so yes, you would want to set your indexer type to ‘elasticsearch’ and then fill in your host and port appropriately.  Looking at the help under the key, it looks like you want to set the index and type there:

re:  ELASTICSEARCH: The name and type path. Example: "/indexName/type"

It looks like your key definition should be correct here:  "logstash-%{+YYYY.MM.dd}/jenkins"

Best,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
https://itsecureadmin.com/

On Mar 20, 2017, at 11:12 AM, iob <[hidden email]> wrote:

@Josh thanks a lot from your help so far.

I assume that you mean Jenkins -> Manage Jenkins -> Global Tool Configuration -> Logstash Plugin. Which in this case yes i mean the key. Also I noticed that you suggest indexer type to ‘syslog’ but i have to elasticsearch as I want to push directly to elastic. I am going to try what you suggest. But I wonder whether we do need to give the "key"?



On Friday, March 17, 2017 at 3:17:09 PM UTC, Josh Miller wrote:
When you say you have it configured, do you mean the “key” field?  I have found that you do not need to set that.  To send the output of Jenkins jobs to logstash, only set:

Jenkins -> Manage Jenkins -> Logstash
1. indexer type to ‘syslog’
2. hostname to logstash
3. port to $logstash_port

If you have a lot of output going to logstash, you might have json parse errors which would prevent proper indexing to elasticsearch.  Check the records in elasticsearch around the time that you would expect to see the Jenkins output as it might not be typed properly.  One way to troubleshoot this is to set the max lines from the job going to logstash to something small, like 5, and then check to see if you are sending data properly.  Also, be sure to use the post build action to send output to logstash.

Best,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" target="_blank" rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" onclick="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" class="">https://itsecureadmin.com/

On Mar 17, 2017, at 8:04 AM, iob <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="yiLVgTQ-BwAJ" rel="nofollow" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;" class="">jbona...@...> wrote:

yeah but what should I give to the jenkins' logstash-plugin. i have configured as logstash-%{+YYYY.MM.dd}/jenkins now. Although i cant see anything when I search for type:jenkins

On Friday, March 17, 2017 at 2:28:25 PM UTC, Josh Miller wrote:
You would want to define the index in the output section of logstash.config, i.e.:

output {
    elasticsearch {
        hosts => [host"]
        index => “logstash-logs-%{+YYYY.MM.dd}"
    }   

}


RE:  <a href="https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index" rel="nofollow" target="_blank" onmousedown="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg';return true;" onclick="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.elastic.co%2Fguide%2Fen%2Flogstash%2Fcurrent%2Fplugins-outputs-elasticsearch.html%23plugins-outputs-elasticsearch-index\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNHycLWgm-XZZ0XGxhNsdz69tSluZg';return true;" class="">https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index


HTH,

Josh Miller
ITSA Consulting, LLC
skype:  itsecureadmin
<a href="https://itsecureadmin.com/" rel="nofollow" target="_blank" onmousedown="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" onclick="this.href='https://www.google.com/url?q\x3dhttps%3A%2F%2Fitsecureadmin.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGl-OUFAQA6bjcRHWU6BVmVJhnx8A';return true;" class="">https://itsecureadmin.com/

On Mar 17, 2017, at 7:24 AM, iob <[hidden email]> wrote:

i have set up a logstash-plugin to forward logs to elasticsearch. for now it works and i can see logs on logstash-jenkins index that
has been set in the plugin. What I want though is to sent to logstash-YY.mm.dd indices. i tried to set the "key" to logstash-* but doesnt seem to work. any idea?

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium=email&amp;utm_source=footer" rel="nofollow" target="_blank" onmousedown="this.href='https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" onclick="this.href='https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" class="">https://groups.google.com/d/msgid/jenkinsci-users/354daa13-1875-46e0-8d76-b1dc9b5b0f85%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" rel="nofollow" target="_blank" onmousedown="this.href='https://groups.google.com/d/optout';return true;" onclick="this.href='https://groups.google.com/d/optout';return true;" class="">https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="yiLVgTQ-BwAJ" rel="nofollow" onmousedown="this.href='javascript:';return true;" onclick="this.href='javascript:';return true;" class="">jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium=email&amp;utm_source=footer" target="_blank" rel="nofollow" onmousedown="this.href='https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" onclick="this.href='https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com?utm_medium\x3demail\x26utm_source\x3dfooter';return true;" class="">https://groups.google.com/d/msgid/jenkinsci-users/c0c08e8f-4a70-4b2b-abe2-50544d033b59%40googlegroups.com.
For more options, visit <a href="https://groups.google.com/d/optout" target="_blank" rel="nofollow" onmousedown="this.href='https://groups.google.com/d/optout';return true;" onclick="this.href='https://groups.google.com/d/optout';return true;" class="">https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/ec8ce47d-6e76-40be-9225-b2b42570276c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/6375F1DE-7AC5-4B77-ABF9-8D38BEE14606%40itsecureadmin.com.
For more options, visit https://groups.google.com/d/optout.
Loading...