{
  "name": "logstash",
  "title": "Logstash",
  "version": "2.10.0",
  "release": "ga",
  "description": "Collect logs and metrics from Logstash with Elastic Agent.",
  "type": "integration",
  "download": "/epr/logstash/logstash-2.10.0.zip",
  "path": "/package/logstash/2.10.0",
  "icons": [
    {
      "src": "/img/logo_logstash.svg",
      "path": "/package/logstash/2.10.0/img/logo_logstash.svg",
      "title": "logo logstash",
      "size": "32x32",
      "type": "image/svg+xml"
    }
  ],
  "conditions": {
    "kibana": {
      "version": "^8.17.0 || ^9.0.0"
    },
    "elastic": {
      "subscription": "basic"
    }
  },
  "owner": {
    "type": "elastic",
    "github": "elastic/logstash"
  },
  "categories": [
    "observability",
    "elastic_stack"
  ],
  "signature_path": "/epr/logstash/logstash-2.10.0.zip.sig",
  "format_version": "3.0.0",
  "readme": "/package/logstash/2.10.0/docs/README.md",
  "license": "basic",
  "screenshots": [
    {
      "src": "/img/kibana-logstash-log.png",
      "path": "/package/logstash/2.10.0/img/kibana-logstash-log.png",
      "title": "kibana logstash log",
      "size": "1266x1343",
      "type": "image/png"
    },
    {
      "src": "/img/kibana-logstash-slowlog.png",
      "path": "/package/logstash/2.10.0/img/kibana-logstash-slowlog.png",
      "title": "kibana logstash slowlog",
      "size": "1265x1341",
      "type": "image/png"
    }
  ],
  "assets": [
    "/package/logstash/2.10.0/LICENSE.txt",
    "/package/logstash/2.10.0/changelog.yml",
    "/package/logstash/2.10.0/manifest.yml",
    "/package/logstash/2.10.0/validation.yml",
    "/package/logstash/2.10.0/docs/README.md",
    "/package/logstash/2.10.0/img/kibana-logstash-log.png",
    "/package/logstash/2.10.0/img/kibana-logstash-slowlog.png",
    "/package/logstash/2.10.0/img/logo_logstash.svg",
    "/package/logstash/2.10.0/data_stream/health_report/manifest.yml",
    "/package/logstash/2.10.0/data_stream/health_report/sample_event.json",
    "/package/logstash/2.10.0/data_stream/log/manifest.yml",
    "/package/logstash/2.10.0/data_stream/log/sample_event.json",
    "/package/logstash/2.10.0/data_stream/node/manifest.yml",
    "/package/logstash/2.10.0/data_stream/node/sample_event.json",
    "/package/logstash/2.10.0/data_stream/node_cel/manifest.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/sample_event.json",
    "/package/logstash/2.10.0/data_stream/node_stats/manifest.yml",
    "/package/logstash/2.10.0/data_stream/node_stats/sample_event.json",
    "/package/logstash/2.10.0/data_stream/pipeline/manifest.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/sample_event.json",
    "/package/logstash/2.10.0/data_stream/plugins/manifest.yml",
    "/package/logstash/2.10.0/data_stream/plugins/sample_event.json",
    "/package/logstash/2.10.0/data_stream/slowlog/manifest.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/sample_event.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-23d2c717-0fd1-4cb1-8d10-69c2fe669a63.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-4bbf4a50-6ece-11ee-910d-eb0006359086.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-4f60a1e0-6eab-11ee-86f6-d7074508d975.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-79270240-48ee-11ee-8cb5-99927777c522.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-838aac39-8edd-48b0-95b4-289e42b1e98a.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-8f8c78a0-6e9e-11ee-86f6-d7074508d975.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-9a72208d-e446-48b9-8a63-c4256b9aa4e3.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-9d450b10-4680-11ee-9ddc-919f87fe352d.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-Logs-Logstash-Log-Dashboard.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-Logs-Logstash-Slowlog-Dashboard.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-a42d7060-45e6-11ee-957b-3720c0b0fbc5.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-b516a470-71ea-11ee-aadf-e577130ac888.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-b5234e70-6f54-11ee-910d-eb0006359086.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-bc1a8050-5ee1-11ee-8e78-bf6865bc3ffc.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-c0594170-526a-11ee-9ecc-31444cb79548.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-ee860840-41ed-11ee-874b-fdb94cc3273a.json",
    "/package/logstash/2.10.0/kibana/dashboard/logstash-fe17b800-6eb4-11ee-86f6-d7074508d975.json",
    "/package/logstash/2.10.0/kibana/index_pattern/logstash-sm-metrics.json",
    "/package/logstash/2.10.0/kibana/search/logstash-742e45d0-cbdd-11e7-9852-73e0a9df1bb6.json",
    "/package/logstash/2.10.0/kibana/search/logstash-cfaba090-cbda-11e7-9852-73e0a9df1bb6.json",
    "/package/logstash/2.10.0/data_stream/health_report/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/health_report/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/health_report/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/log/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/log/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/log/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/node/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/node/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/node/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/node/fields/package-fields.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/fields/agent.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/node_cel/fields/package-fields.yml",
    "/package/logstash/2.10.0/data_stream/node_stats/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/node_stats/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/node_stats/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/node_stats/fields/package-fields.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/fields/agent.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/pipeline/fields/package-fields.yml",
    "/package/logstash/2.10.0/data_stream/plugins/fields/agent.yml",
    "/package/logstash/2.10.0/data_stream/plugins/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/plugins/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/plugins/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/plugins/fields/package-fields.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/fields/base-fields.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/fields/ecs.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/fields/fields.yml",
    "/package/logstash/2.10.0/data_stream/health_report/agent/stream/stream.yml.hbs",
    "/package/logstash/2.10.0/data_stream/log/agent/stream/log.yml.hbs",
    "/package/logstash/2.10.0/data_stream/log/elasticsearch/ingest_pipeline/default.yml",
    "/package/logstash/2.10.0/data_stream/log/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/logstash/2.10.0/data_stream/log/elasticsearch/ingest_pipeline/pipeline-plaintext.yml",
    "/package/logstash/2.10.0/data_stream/node/agent/stream/stream.yml.hbs",
    "/package/logstash/2.10.0/data_stream/node_cel/agent/stream/cel.yml.hbs",
    "/package/logstash/2.10.0/data_stream/node_stats/agent/stream/stream.yml.hbs",
    "/package/logstash/2.10.0/data_stream/pipeline/agent/stream/cel.yml.hbs",
    "/package/logstash/2.10.0/data_stream/pipeline/elasticsearch/ingest_pipeline/default.yml",
    "/package/logstash/2.10.0/data_stream/plugins/agent/stream/cel.yml.hbs",
    "/package/logstash/2.10.0/data_stream/plugins/elasticsearch/ingest_pipeline/default.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/agent/stream/log.yml.hbs",
    "/package/logstash/2.10.0/data_stream/slowlog/elasticsearch/ingest_pipeline/default.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/elasticsearch/ingest_pipeline/pipeline-json.yml",
    "/package/logstash/2.10.0/data_stream/slowlog/elasticsearch/ingest_pipeline/pipeline-plaintext.yml"
  ],
  "policy_templates": [
    {
      "name": "logstash",
      "title": "Logstash logs and metrics",
      "description": "Collect logs and metrics from Logstash instances",
      "inputs": [
        {
          "type": "cel",
          "vars": [
            {
              "name": "url",
              "type": "text",
              "title": "Logstash URL",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "http://localhost:9600"
            },
            {
              "name": "username",
              "type": "text",
              "title": "Username",
              "description": "Use when connecting to logstash",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "password",
              "type": "password",
              "title": "Password",
              "description": "Use when connecting to logstash",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "resource_ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "i.e. certificate, certificate_authorities, verification_mode etc. See [SSL](https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-ssl.html#ssl-client-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#certificate_authorities: [\"/etc/ca.crt\"]\n#certificate: \"/etc/client.crt\"\n#key: \"/etc/client.key\"\n"
            },
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Metrics (Elastic Agent)",
          "description": "Collect Metrics and stats from Logstash instances to power dedicated Logstash Dashboards in Kibana"
        },
        {
          "type": "logfile",
          "vars": [
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Logs",
          "description": "Collect application and slowlog logs from Logstash instances"
        },
        {
          "type": "logstash/metrics",
          "vars": [
            {
              "name": "hosts",
              "type": "text",
              "title": "Hosts",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "http://localhost:9600"
              ]
            },
            {
              "name": "username",
              "type": "text",
              "title": "Username",
              "description": "Use when connecting to logstash",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "password",
              "type": "password",
              "title": "Password",
              "description": "Use when connecting to logstash",
              "multi": false,
              "required": false,
              "show_user": false
            },
            {
              "name": "ssl",
              "type": "yaml",
              "title": "SSL Configuration",
              "description": "SSL configuration options. See [documentation](https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-ssl.html#ssl-client-config) for details.",
              "multi": false,
              "required": false,
              "show_user": false,
              "default": "#certificate_authorities: [\"/etc/ca.crt\"]\n#certificate: \"/etc/client.crt\"\n#key: \"/etc/client.key\"\n"
            },
            {
              "name": "condition",
              "type": "text",
              "title": "Condition",
              "description": "Condition to filter when to collect this input",
              "multi": false,
              "required": false,
              "show_user": false
            }
          ],
          "title": "Metrics (Stack Monitoring)",
          "description": "Collect node metrics and stats from Logstash instances to power the Stack Monitoring application in Kibana.\n Disable if using Metrics (Elastic Agent)."
        }
      ],
      "multiple": true
    }
  ],
  "data_streams": [
    {
      "type": "metrics",
      "dataset": "logstash.health_report",
      "title": "Health Report",
      "release": "beta",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "30s"
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Collect Health Report",
          "description": "Health Report for Logstash instance",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "health_report"
    },
    {
      "type": "logs",
      "dataset": "logstash.log",
      "title": "Logstash logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/logstash/logstash-plain*.log"
              ]
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Logstash logs",
          "description": "Collect Logstash logs from standard files",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "logstash",
      "path": "log"
    },
    {
      "type": "metrics",
      "dataset": "logstash.stack_monitoring.node",
      "title": "Logstash node metrics",
      "release": "ga",
      "streams": [
        {
          "input": "logstash/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Logstash node metrics",
          "description": "Collect Logstash node metrics",
          "enabled": false,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "node"
    },
    {
      "type": "metrics",
      "dataset": "logstash.node",
      "title": "Logstash Node Stats",
      "release": "ga",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "30s"
            }
          ],
          "template_path": "cel.yml.hbs",
          "title": "Collect Node Metrics",
          "description": "Collect Metrics related to Nodes running Logstash",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "node_cel"
    },
    {
      "type": "metrics",
      "dataset": "logstash.stack_monitoring.node_stats",
      "title": "Logstash node_stats metrics",
      "release": "ga",
      "streams": [
        {
          "input": "logstash/metrics",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "10s"
            }
          ],
          "template_path": "stream.yml.hbs",
          "title": "Logstash node stats metrics",
          "description": "Collect Logstash node stats metrics",
          "enabled": false,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        }
      },
      "path": "node_stats"
    },
    {
      "type": "metrics",
      "dataset": "logstash.pipeline",
      "title": "Logstash pipeline",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "30s"
            }
          ],
          "template_path": "cel.yml.hbs",
          "title": "Collect Pipeline Metrics",
          "description": "Collect Metrics related to Logstash Pipeline usage",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        },
        "ingest_pipeline.name": "default"
      },
      "path": "pipeline"
    },
    {
      "type": "metrics",
      "dataset": "logstash.plugins",
      "title": "Logstash plugins",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "cel",
          "vars": [
            {
              "name": "period",
              "type": "text",
              "title": "Period",
              "multi": false,
              "required": true,
              "show_user": true,
              "default": "1m"
            }
          ],
          "template_path": "cel.yml.hbs",
          "title": "Collect Plugin Metrics",
          "description": "Collect metrics for Logstash plugin use. Note that large pipelines will increase the volume of plugin metrics, and a slower rate of collection may be appropriate",
          "enabled": true,
          "ingestion_method": "API"
        }
      ],
      "package": "logstash",
      "elasticsearch": {
        "index_template.mappings": {
          "dynamic": false
        },
        "ingest_pipeline.name": "default"
      },
      "path": "plugins"
    },
    {
      "type": "logs",
      "dataset": "logstash.slowlog",
      "title": "logstash slowlog logs",
      "release": "ga",
      "ingest_pipeline": "default",
      "streams": [
        {
          "input": "logfile",
          "vars": [
            {
              "name": "paths",
              "type": "text",
              "title": "Paths",
              "multi": true,
              "required": true,
              "show_user": true,
              "default": [
                "/var/log/logstash/logstash-slowlog-plain*.log"
              ]
            }
          ],
          "template_path": "log.yml.hbs",
          "title": "Logstash slowlog logs",
          "description": "Collect logstash slowlog logs using log input",
          "enabled": true,
          "ingestion_method": "File"
        }
      ],
      "package": "logstash",
      "path": "slowlog"
    }
  ]
}