Skip to content
This repository

logstash - logs/event transport, processing, management, search.

Merge pull request #1092 from subsection/master

Added option to disable certificate validation in the IMAP input
latest commit cf3248332e
Jordan Sissel jordansissel authored April 21, 2014
Octocat-spinner-32 acceptance_spec Improve package acceptance tests April 15, 2014
Octocat-spinner-32 bin Permit relative path or $PATH searches for the java command. April 16, 2014
Octocat-spinner-32 bot Warm welcome to bot,may it serves you well March 11, 2013
Octocat-spinner-32 docs replace bluecloth with kramdown pure-ruby markdown parser April 03, 2014
Octocat-spinner-32 lib Merge pull request #1092 from subsection/master April 21, 2014
Octocat-spinner-32 locales On config failure, tell users about --configtest January 31, 2014
Octocat-spinner-32 patterns Merge pull request #1127 from logongas/master April 09, 2014
Octocat-spinner-32 pkg Add LS_LOG_DIR option April 16, 2014
Octocat-spinner-32 spec Merge pull request #1244 from wiibaa/date-success April 16, 2014
Octocat-spinner-32 test - purge old and unused 'test' directory (everything is rspec now) June 23, 2013
Octocat-spinner-32 tools Add gemfile April 15, 2014
Octocat-spinner-32 .gitignore Ignore the file November 19, 2013
Octocat-spinner-32 .tailor - add .tailor config December 03, 2012
Octocat-spinner-32 .travis.yml rspec wasn't in PATH, adding --debug flag to jvm args September 25, 2013
Octocat-spinner-32 CHANGELOG Update changelog March 20, 2014
Octocat-spinner-32 - add CONTRIBUTING docs September 16, 2013
Octocat-spinner-32 CONTRIBUTORS Updates contributors February 14, 2014
Octocat-spinner-32 LICENSE it's 2013! January 01, 2013
Octocat-spinner-32 Makefile Bump Elasticsearch to 1.1.1 and Kibana to 3.0.1 April 16, 2014
Octocat-spinner-32 reverse bracketology April 09, 2014
Octocat-spinner-32 - clean up style guide a bit January 03, 2013
Octocat-spinner-32 extract_services.rb - Merge META-INF/services/* files from dependency jars. (#486) May 28, 2013
Octocat-spinner-32 gembag.rb Try more times to fetch from February 28, 2014
Octocat-spinner-32 logstash-event.gemspec . September 11, 2013
Octocat-spinner-32 logstash.gemspec replace bluecloth with kramdown pure-ruby markdown parser April 03, 2014
Octocat-spinner-32 pull_release_note.rb Make release note from JIRA and Github March 11, 2013
Octocat-spinner-32 require-analyze.rb - hacky script to analyze the DEBUG=require csv output grouped by December 07, 2013


Logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, Logstash comes with a web interface for searching and drilling into all of your logs.

It is fully free and fully open source. The license is Apache 2.0, meaning you are pretty much free to use it however you want in whatever way.

For more info, see


AKA "Where'd that plugin go??"

In version 1.4.0 of Logstash, some of the community-contributed plugins were moved to a new home in the Elasticsearch logstash-contrib repo. If you can't find a plugin here which you've previously used, odds are it is now located there. The good news is that these plugins are simple to install using the Logstash manual plugin installation script.

Need Help?

Need help? Try #logstash on freenode irc or the mailing list.

You can also find documentation on the site.


If you don't have JRuby already (or don't use rvm, rbenv, etc), you can have bin/logstash fetch it for you by setting USE_JRUBY:

USE_JRUBY=1 bin/logstash ...

Otherwise, here's how to get started with rvm:

# Install JRuby with rvm
rvm install jruby-1.7.11
rvm use jruby-1.7.11

Now install dependencies:

# Install logstash ruby dependencies
bin/logstash deps

Other commands:

# to use Logstash gems or libraries in irb, use the following
# this gets you an 'irb' shell with Logstash's environment
bin/logstash irb

# Run Logstash
bin/logstash agent [options]

# If running bin/logstash agent yields complaints about log4j/other things
# This will download the elasticsearch jars so Logstash can use them.
make vendor-elasticsearch


There are a few ways to run the tests. For development, using bin/logstash rspec <some spec> will suffice:

% bin/logstash rspec spec/filters/grok.rb

Finished in 0.123 seconds
19 examples, 0 failures

Alternately, if you have just built the tarball, you can run the tests specifically on those like so:

make tarball-test

If you want to run all the tests from source, do:

make test


Building is not required. You are highly recommended to download the releases we provide from the Logstash site!

If you want to build the release tarball yourself, run:

make tarball

You can build rpms and debs, if you need those. Building rpms requires you have fpm, then do this:

make package

Project Principles

  • Community: If a newbie has a bad time, it's a bug.
  • Software: Make it work, then make it right, then make it fast.
  • Technology: If it doesn't do a thing today, we can make it do it tomorrow.


All contributions are welcome: ideas, patches, documentation, bug reports, complaints, and even something you drew up on a napkin.

Programming is not a required skill. Whatever you've seen about open source and maintainers or community members saying "send patches or die" - you will not see that here.

It is more important to me that you are able to contribute.

For more information about contributing, see the CONTRIBUTING file.

Something went wrong with that request. Please try again.