"Tail" a logstash server query
Posted
by
phatmanace
on Server Fault
See other posts from Server Fault
or by phatmanace
Published on 2014-06-11T20:11:20Z
Indexed on
2014/06/11
21:27 UTC
Read the original article
Hit count: 212
logstash
Assuming I have a logstash server chocked full of logs being loaded regularly, is there a reasonably elegant way that I can tail the results of a continuously executing query on the logstash server and show this in a terminal window
e.g
some-special-logstash-command.sh | egrep -v "(searchword1|searchword2)"
the idea being that the command pipes stuff out of logstash and to my grep query that filters and shows me the filtered output for.
.. of course if there is a logstash command that can do the grep piece for me as well, then that works too :)
motivation for doing this, is that assuming all of my events from my estate is being loaded into logstash, then would be nice to have a terminal window with a continuous tail of interesting events as they occur scrolling past the screen.
-Ace
© Server Fault or respective owner