LogstashUI

A visual tool for authoring, simulating, and managing Logstash pipelines.

⚠️ Beta Release - This project is under active development. Features may change.

Overview

LogstashUI provides a visual interface for designing, testing, and operating Logstash pipelines.

Instead of editing configuration files manually, pipelines can be authored visually, simulated against sample events, and deployed to multiple Logstash nodes from a single interface.

Features

Visual Pipeline Editor — Author pipelines in three modes: an inline graphical interface, raw text editor, and a full visual graph for building pipelines by connecting nodes. Switch between modes seamlessly on any pipeline.

Pipeline Simulation — Execute pipelines against sample events and inspect transformations step-by-step

Multi-Instance Management — Manage pipelines across multiple Logstash nodes using Centralized Pipeline Management

Pipeline Monitoring — View metrics and performance for running pipelines

SNMP Support — Configure polling, traps, and discovery through a web interface

Requirements

System Requirements

Minimum:

• 8 GB RAM
• 4 CPU Cores

Software

For Embedded mode (See Quick Start)

• Docker

For Host mode (If you have a simulation-heavy use case)

• Docker
• Python 3.12+
• Logstash 8.x, 9.x

For Local Development

• Python 3.12+
• Node.js & npm (for building Tailwind CSS assets)
• Elasticsearch 8.x or later
• Docker

Quick Start - Embedded Mode

Tip

If you plan on doing a lot of simulations, consider using host mode. It's more performant.

Download LogstashUI

git clone https://github.com/elastic/LogstashUI.git
cd LogstashUI/bin

Run LogstashUI

Linux

./start_logstashui.sh

Windows

start_logstashui.bat

Once the containers are running, navigate to your host in your browser:

https://<your_server_ip_or_hostname>

And that's it!

---

Add Your First Connection

1. Create an initial user

2. Add a connection

3. Start managing pipelines!

Optional: Add monitoring to your connections:

Use this guide to set up the Elastic Agent's Logstash integration. Once Logstash monitoring data is indexed into Elasticsearch, metrics and logs will appear in the UI.

Updating

LogstashUI will notify you when a new version is available via a banner in the navigation sidebar:

To update LogstashUI to the latest version:

Linux

cd LogstashUI/bin
./start_logstashui.sh --update

Windows

cd LogstashUI\bin
start_logstashui.bat --update

Limitations

• Currently, the translation engine cannot process comments inside plugin blocks. For example:

input {
    udp { # Translation engine doesn't like this
		port => 5119 # This is a comment that we can't convert
	}
}

Roadmap

• Reusable grok and regex patterns
• Git backups for configuration
• Loggy AI Assistant for pipeline failure analysis
• Management of Logstash Nodes via external agent
• Logstash Keystore management
• Expression editor for conditions

Reporting Issues

Found a bug or have a feature request? Open an issue.

Contributing

Contributions are welcome!

Please open an issue to discuss large changes before submitting a pull request.

License

Copyright 2024–2026 Elasticsearch and contributors.

Licensed under the Apache License, Version 2.0. See LICENSE for details.