Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
86 commits
Select commit Hold shift + click to select a range
99627d4
Remove the log parameter as web doesn't allow it
alappe Apr 18, 2014
ae867bc
[rabbitmq] March Hare 2.3.0+, Bunny 1.3.1+
michaelklishin Jul 3, 2014
cc21559
use bundler compatible ruby version string
colinsurprenant Jul 14, 2014
6e3d377
Evaluate dynamic fields in event when used with gsub
Jul 18, 2014
e086e1c
Add tests for issue to reproduce behavior
Jul 21, 2014
0d987ca
Add tests for issue to reproduce behavior
Jul 21, 2014
c7fb7de
call vendor-geoip instead of $(GEOIP) in prepare-tarball
joekiller Jul 22, 2014
f35b98e
Merge remote-tracking branch 'upstream/master'
Jul 23, 2014
a466581
Merge pull request #1532 from colinsurprenant/fix/gem_path
jordansissel Jul 23, 2014
5daa328
Update ES version docs
jordansissel Jul 24, 2014
18c4ec2
correct documentation of some config elements
May 15, 2014
e148542
Update metrics.rb example
aebm May 13, 2014
925ce92
Removed version info in LS command
Jul 26, 2014
f8e0099
Add tilde to UNIXPATH
briandef Mar 21, 2014
95abfde
reject invalid UNIX timestamp
wiibaa Apr 11, 2014
2e21df8
stronger regex and code-style change
wiibaa May 11, 2014
5194960
fix failing test
wiibaa Jun 23, 2014
0f79064
use non-capturing group in float regex
wiibaa Jul 30, 2014
4c86e33
config grammar: Allow spaces in [field references][like this]
jordansissel Jul 8, 2014
6b20d17
Adding delaycompress to logrotate
Jul 16, 2014
e9e3ad5
Update multiline.rb
Aug 1, 2014
bdd6906
add unique tag for grok parser in module input
simonmulser Aug 3, 2014
409dc8c
LOGSTASH-2276 fixed if/else branch mixup in rabbitmq input
nukemberg Aug 7, 2014
da147db
fix typos: elasticearch -> elasticsearch
chris-martin Aug 7, 2014
cf9844d
Add sprintf ability to room_id field in hipchat output
Aug 11, 2014
adfbc34
Update Gemfile for package testing
Aug 19, 2014
d7204d6
Merge pull request #1647 from electrical/fix_package_testing
Aug 19, 2014
dbe6b33
Update version 1.5.0.dev
jordansissel Aug 21, 2014
b7c71cd
Merge pull request #1287 from alappe/remove_parameter
jordansissel Aug 22, 2014
f460507
Merge pull request #1625 from khouse/master
jordansissel Aug 22, 2014
9391457
Merge pull request #1608 from chris-martin/typo
jordansissel Aug 22, 2014
40eff42
Merge pull request #1607 from Fewbytes/LOGSTASH-2276
jordansissel Aug 22, 2014
ab60853
Merge pull request #1591 from yummylogs/master
jordansissel Aug 22, 2014
7c83295
Merge pull request #1494 from michaelklishin/patch-5
jordansissel Aug 22, 2014
6376945
Update march_hare and bunny to latest
jordansissel Aug 22, 2014
abe6bdb
LOGSTASH-1886: intercept exception raised by march_hare
Aug 26, 2014
a764ed9
Added more tests without the need for live syslog input
Aug 26, 2014
2f12d38
Merge branch 'pr/1593'
Aug 26, 2014
8351fbd
filter/mutate raise configError in register
wiibaa Aug 22, 2014
d7bb4df
More fixes to use new grok lib
Aug 11, 2014
7b9aba2
Use updated grok version
Aug 22, 2014
0aaf8c6
Clean up code
Aug 22, 2014
dafb3f1
Merge pull request #1665 from mfournier/LOGSTASH-1886-2nd_try
jordansissel Aug 28, 2014
18049e1
Support almost-ISO8601 patterns in date filter ISO8601 config
wiibaa Nov 11, 2013
3096aec
fix rebase
wiibaa Aug 1, 2014
f5b4f0d
Add Plugin manager to Logstash
Jul 25, 2014
3efce86
filter/date fix locale config
wiibaa Aug 26, 2014
56dbbff
String has to be surrounded by quotes
wickeddoc Sep 2, 2014
2efad5b
prevent overwrite of event host field
Aug 27, 2014
73e52b2
Dynamic include_keys and exclude_keys for kv filter
pfletcherhill Aug 8, 2014
c327896
Change credentials default to [], use empty array
ururk Aug 25, 2014
06010a1
Removed nil check
Sep 3, 2014
4683e51
Merge @joekiller's Kafka plugin to logstash-core
Jul 14, 2014
39976a3
Prevents event.sprintf from converting floats to sci notation
jsvd Sep 4, 2014
cff7c37
Dont add kafka metadata by default
Sep 4, 2014
01f5c75
Merge remote-tracking branch 'upstream/master'
Sep 5, 2014
4211522
Add recurse method for doing breadth-first traversal of the AST
jordansissel Apr 12, 2014
bf953f0
Fixes finterprint filter handling of timestamp field
torrancew Aug 4, 2014
d65706d
Improvements to plugin manager
Sep 10, 2014
9398cd6
Move logstash gemspec loading into environment module
Sep 10, 2014
9c16d78
this should fix logstash #1738
joekiller Sep 16, 2014
01e9f37
test and fix for LOGSTASH-2288
wiibaa Sep 23, 2014
b0091b2
Remove the ability to run multiple commands
jsvd Sep 18, 2014
a536eef
spec the absense and wrong commands
jsvd Sep 19, 2014
bf11118
stringify all symbols in twitter hash
colinsurprenant Jun 18, 2014
10ac156
add robustness to tweets stream handling
colinsurprenant Jun 18, 2014
a78f6ba
monkey patch twitter gem to trap json parsing exceptions and use our …
colinsurprenant Jun 18, 2014
d2f6118
support :symbolize_keys options for json parsing
colinsurprenant Jun 18, 2014
e4ac936
honor common to_json method signature
colinsurprenant Sep 23, 2014
8c133c3
add ruby filter spec
colinsurprenant Sep 23, 2014
19c6caa
Updated link in syslog documentation
jamtur01 Sep 13, 2014
26a27f2
specify ctrl-d to halt pipeline
kurtado Sep 23, 2014
ac45c43
CTRL-C Enter is OK too
kurtado Sep 23, 2014
96c5e32
Fix add_tag behaviour in dns filter
jsvd Sep 27, 2014
7395512
filter/xml fix for LOGSTASH-2246: extract non-ascii content with xpath
wiibaa Sep 26, 2014
f7d7a75
Set the string encoding when parsing XML
jordansissel Sep 29, 2014
51b3bf4
[RSPEC] Refactoring step 1
Sep 16, 2014
17e282c
Update gitignore file
Sep 21, 2014
46a6e78
Add missing tests
Sep 21, 2014
58f6bad
An other missing one
Sep 21, 2014
ef23308
Fix performance tests
Sep 21, 2014
42fa9ea
[TESTING] Fix tcp input spec test
Sep 22, 2014
6daeb22
[TESTING] Fix Kafka output test
Sep 22, 2014
79c4802
Minor fixes after review
Sep 22, 2014
cf22421
[TESTING] Convert ruby filter spec after rebase
Sep 30, 2014
284ec9f
remove kafka source since they moved to separate plugin
Sep 29, 2014
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -23,3 +23,5 @@ etc/jira-output.conf
coverage/*
.VERSION.mk
.idea/*
spec/reports
rspec.xml
26 changes: 23 additions & 3 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,12 @@ GEOIP_ASN=vendor/geoip/GeoIPASNum.dat
GEOIP_ASN_URL=http://logstash.objects.dreamhost.com/maxmind/GeoIPASNum-2014-02-12.dat.gz
KIBANA_URL=https://download.elasticsearch.org/kibana/kibana/kibana-3.0.1.tar.gz
PLUGIN_FILES=$(shell find lib -type f| egrep '^lib/logstash/(inputs|outputs|filters|codecs)/[^/]+$$' | egrep -v '/(base|threadable).rb$$|/inputs/ganglia/')
SCALA_VERSION?=2.9.2

KAFKA_VERSION?=0.8.1.1
KAFKA_URL=https://archive.apache.org/dist/kafka
KAFKA=vendor/jar/kafka_$(SCALA_VERSION)-$(KAFKA_VERSION)

QUIET=@
ifeq (@,$(QUIET))
QUIET_OUTPUT=> /dev/null 2>&1
Expand Down Expand Up @@ -149,6 +155,11 @@ vendor/jar/graphtastic-rmiclient.jar: | wget-or-curl vendor/jar
@echo "=> Fetching graphtastic rmi client jar"
$(QUIET)$(DOWNLOAD_COMMAND) $@ http://cloud.github.com/downloads/NickPadilla/GraphTastic/graphtastic-rmiclient.jar

vendor/jar/kafka_$(SCALA_VERSION)-$(KAFKA_VERSION).tgz: | wget-or-curl vendor/jar
@echo "=> Fetching kafka $(SCALA_VERSION)-$(KAFKA_VERSION)"
$(QUIET)$(DOWNLOAD_COMMAND) $@ $(KAFKA_URL)/$(KAFKA_VERSION)/kafka_$(SCALA_VERSION)-$(KAFKA_VERSION).tgz


.PHONY: vendor-elasticsearch
vendor-elasticsearch: $(ELASTICSEARCH)
$(ELASTICSEARCH): $(ELASTICSEARCH).tar.gz | vendor/jar
Expand Down Expand Up @@ -183,6 +194,15 @@ $(TYPESDB): | vendor/collectd
$(QUIET)tar zxf [email protected] -O "collectd-$(COLLECTD_VERSION)/src/types.db" > $@
$(QUIET)rm [email protected]

.PHONY: vendor-kafka
vendor-kafka: $(KAFKA)
$(KAFKA): $(KAFKA).tgz | vendor/jar
@echo "=> Pulling the jars out of $<"
$(QUIET)tar -C $(shell dirname $@) -xf $< $(TAR_OPTS) \
'kafka_$(SCALA_VERSION)-$(KAFKA_VERSION)/libs/*.jar'
$(QUIET)tar -C $(shell dirname $@) -xf $< $(TAR_OPTS) \
'kafka_$(SCALA_VERSION)-$(KAFKA_VERSION)/*.jar'

# Always run vendor/bundle
.PHONY: fix-bundler
fix-bundler:
Expand Down Expand Up @@ -219,7 +239,7 @@ vendor/ua-parser/regexes.yaml: | vendor/ua-parser/

.PHONY: test
test: QUIET_OUTPUT=
test: | $(JRUBY) vendor-elasticsearch vendor-geoip vendor-collectd vendor-gems
test: | $(JRUBY) vendor-elasticsearch vendor-geoip vendor-collectd vendor-kafka vendor-gems
$(SPEC_ENV) bin/logstash rspec $(SPEC_OPTS) --order rand --fail-fast $(TESTS)

.PHONY: reporting-test
Expand Down Expand Up @@ -355,12 +375,12 @@ show:

.PHONY: prepare-tarball
prepare-tarball tarball zip: WORKDIR=build/tarball/logstash-$(VERSION)
prepare-tarball: vendor/kibana $(ELASTICSEARCH) $(JRUBY) $(GEOIP) $(TYPESDB) vendor-gems
prepare-tarball: vendor/kibana $(ELASTICSEARCH) $(JRUBY) vendor-geoip $(TYPESDB) $(KAFKA) vendor-gems
prepare-tarball: vendor/ua-parser/regexes.yaml
prepare-tarball:
@echo "=> Preparing tarball"
$(QUIET)$(MAKE) $(WORKDIR)
$(QUIET)rsync -a --relative bin lib spec locales patterns vendor/bundle/jruby vendor/geoip vendor/jar vendor/kibana vendor/ua-parser vendor/collectd LICENSE README.md --exclude 'vendor/bundle/jruby/1.9/cache' --exclude 'vendor/bundle/jruby/1.9/gems/*/doc' --exclude 'vendor/jar/elasticsearch-$(ELASTICSEARCH_VERSION).tar.gz' $(WORKDIR)
$(QUIET)rsync -a --relative bin lib spec locales patterns vendor/bundle/jruby vendor/geoip vendor/jar vendor/kibana vendor/ua-parser vendor/collectd LICENSE README.md --exclude 'vendor/bundle/jruby/1.9/cache' --exclude 'vendor/bundle/jruby/1.9/gems/*/doc' --exclude 'vendor/jar/elasticsearch-$(ELASTICSEARCH_VERSION).tar.gz' --exclude 'vendor/jar/kafka_$(SCALA_VERSION)-$(KAFKA_VERSION).tgz' $(WORKDIR)
$(QUIET)sed -i -e 's/^LOGSTASH_VERSION = .*/LOGSTASH_VERSION = "$(VERSION)"/' $(WORKDIR)/lib/logstash/version.rb
$(QUIET)sed -i -e 's/%JRUBY_VERSION%/$(JRUBY_VERSION)/' $(WORKDIR)/bin/logstash.bat

Expand Down
8 changes: 4 additions & 4 deletions docs/tutorials/getting-started-with-logstash.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ hello world

OK, that's interesting... We ran Logstash with an input called "stdin", and an output named "stdout", and Logstash basically echoed back whatever we typed in some sort of structured format. Note that specifying the *-e* command line flag allows Logstash to accept a configuration directly from the command line. This is especially useful for quickly testing configurations without having to edit a file between iterations.

Let's try a slightly fancier example. First, you should exit Logstash by issuing a 'CTRL-C' command in the shell in which it is running. Now run Logstash again with the following command:
Let's try a slightly fancier example. First, you should exit Logstash by issuing a 'CTRL-D' command (or 'CTRL-C Enter') in the shell in which it is running. Now run Logstash again with the following command:
----
bin/logstash -e 'input { stdin { } } output { stdout { codec => rubydebug } }'
----
Expand All @@ -67,7 +67,7 @@ goodnight moon
So, by re-configuring the "stdout" output (adding a "codec"), we can change the output of Logstash. By adding inputs, outputs and filters to your configuration, it's possible to massage the log data in many ways, in order to maximize flexibility of the stored data when you are querying it.

== Storing logs with Elasticsearch
Now, you're probably saying, "that's all fine and dandy, but typing all my logs into Logstash isn't really an option, and merely seeing them spit to STDOUT isn't very useful." Good point. First, let's set up Elasticsearch to store the messages we send into Logstash. If you don't have Elasticearch already installed, you can http://www.elasticsearch.org/download/[download the RPM or DEB package], or install manually by downloading the current release tarball, by issuing the following four commands:
Now, you're probably saying, "that's all fine and dandy, but typing all my logs into Logstash isn't really an option, and merely seeing them spit to STDOUT isn't very useful." Good point. First, let's set up Elasticsearch to store the messages we send into Logstash. If you don't have Elasticsearch already installed, you can http://www.elasticsearch.org/download/[download the RPM or DEB package], or install manually by downloading the current release tarball, by issuing the following four commands:
----
curl -O https://download.elasticsearch.org/elasticsearch/elasticsearch/elasticsearch-%ELASTICSEARCH_VERSION%.tar.gz
tar zxvf elasticsearch-%ELASTICSEARCH_VERSION%.tar.gz
Expand Down Expand Up @@ -120,7 +120,7 @@ which should return something like this:
Congratulations! You've successfully stashed logs in Elasticsearch via Logstash.

=== Elasticsearch Plugins (an aside)
Another very useful tool for querying your Logstash data (and Elasticsearch in general) is the Elasticearch-kopf plugin. Here is more information on http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-plugins.html[Elasticsearch plugins]. To install elasticsearch-kopf, simply issue the following command in your Elasticsearch directory (the same one in which you ran Elasticsearch earlier):
Another very useful tool for querying your Logstash data (and Elasticsearch in general) is the Elasticsearch-kopf plugin. Here is more information on http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-plugins.html[Elasticsearch plugins]. To install elasticsearch-kopf, simply issue the following command in your Elasticsearch directory (the same one in which you ran Elasticsearch earlier):
----
bin/plugin -install lmenezes/elasticsearch-kopf
----
Expand Down Expand Up @@ -261,7 +261,7 @@ Now, let's configure something actually *useful*... apache2 access log files! We
input {
file {
path => "/tmp/access_log"
start_position => beginning
start_position => "beginning"
}
}

Expand Down
2 changes: 1 addition & 1 deletion gembag.rb
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ def install_gem(name, requirement, target)
module Bundler
module SharedHelpers
def default_lockfile
ruby = "#{LogStash::Environment.ruby_engine}-#{LogStash::Environment.ruby_abi_version}"
ruby = "#{LogStash::Environment.ruby_engine}-#{LogStash::Environment.gem_ruby_version}"
return Pathname.new("#{default_gemfile}.#{ruby}.lock")
end
end
Expand Down
Loading