Logstash Input OpenSearch

Welcome!
Project Resources
Configuration for Logstash Input OpenSearch Plugin
Code of Conduct
License
Copyright

Welcome!

logstash-input-opensearch is a community-driven, open source fork logstash-input-elasticsearch licensed under the Apache v2.0 License. For more information, see opensearch.org.

The logstash-input-opensearch plugin helps to read the search query results performed on an OpenSearch cluster. This is useful for replaying test logs, reindexing, etc. This helps users to periodically schedule ingestion using cron syntax (using schedule configuration setting) or by running the query one time to load data into Logstash.

Project Resources

Configuration for Logstash Input OpenSearch Plugin

To run the Logstash Input OpenSearch plugin, add following configuration in your logstash.conf file.

input {
    opensearch {
        hosts       => ["hostname:port"]   
        user        => "admin"
        password    => "admin"
        index       => "logstash-logs-%{+YYYY.MM.dd}"
        query       => "{ "query": { "match_all": {}} }"
    }
}

Using the above configuration, the match_all query filter is triggered and data is loaded once.

schedule setting can be used to periodically schedule ingestion using cron syntax.

Example: schedule => "* * * * *" Adding this to the above configuration loads the data every minute.

Code of Conduct

This project has adopted the Amazon Open Source Code of Conduct. For more information see the Code of Conduct FAQ, or contact [email protected] with any additional questions or comments.

License