"Tail" a logstash server query

Posted by phatmanace on Server Fault See other posts from Server Fault or by phatmanace
Published on 2014-06-11T20:11:20Z Indexed on 2014/06/11 21:27 UTC
Read the original article Hit count: 212

Filed under:

Assuming I have a logstash server chocked full of logs being loaded regularly, is there a reasonably elegant way that I can tail the results of a continuously executing query on the logstash server and show this in a terminal window

e.g

some-special-logstash-command.sh | egrep -v "(searchword1|searchword2)"

the idea being that the command pipes stuff out of logstash and to my grep query that filters and shows me the filtered output for.

.. of course if there is a logstash command that can do the grep piece for me as well, then that works too :)

motivation for doing this, is that assuming all of my events from my estate is being loaded into logstash, then would be nice to have a terminal window with a continuous tail of interesting events as they occur scrolling past the screen.

-Ace

© Server Fault or respective owner

Related posts about logstash