Skip to content
[DEPRECATED] Elastic Beats Input plugin for Graylog
Branch: master
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information.
src Better support for generic beats and additional metadata (#29) Feb 15, 2018
vagrant_winlogbeat Fix typos (#22) May 11, 2017
.gitignore Ignore node_modules Aug 4, 2016
.travis.yml Clean up Travis CI deploy config May 18, 2016
LICENSE.txt Initial commit Apr 22, 2016 Add note about merge into graylog2-server Feb 21, 2018
pom.xml Migrate to Netty 4.1 (#30) Jan 18, 2018


This project has been merged into graylog2-server, see #28

Please use the issue tracker in the graylog2-server repository for any feature requests or bug reports.

Elastic Beats Input Plugin for Graylog

Build Status

Required Graylog version: 2.2.0 and later

This plugin provides an input for the Elastic Beats (formerly Lumberjack) protocol in Graylog which can be used to receive data by log shippers from the logstash-forwards and the Beats family, like Filebeat, Metricbeat, Packetbeat, or Winlogbeat.


Download the plugin and place the JAR file in your Graylog plugin directory. By default the plugin directory is the plugins/ directory relative to your Graylog installation directory and can be configured in your graylog.conf file.

Restart Graylog and you are done.


This project is using Maven and requires Java 8 or higher.

You can build the plugin (JAR) with mvn package.

DEB and RPM packages can be build with mvn jdeb:jdeb and mvn rpm:rpm respectively.

Plugin Release

In order to release a new version of the plugin, run the following commands:

$ mvn release:prepare
$ mvn release:perform

This sets the version numbers, creates a tag and pushes to GitHub.

Travis CI will build the release artifacts and upload to GitHub automatically.


Copyright (c) 2016 Graylog, Inc.

This library is licensed under the GNU General Public License, Version 3.0.

See or the LICENSE.txt file in this repository for the full license text.

You can’t perform that action at this time.