Public | Automated Build

Last pushed: 14 days ago
Short Description
Container with a basic configuration that parses syslog data in port 51415 and gelf in 12201/udp
Full Description

Softonic Logstash


This image starts a logstash container with a basic configuration that parses:

  • JSON (e.g. for Logspout) in port 5000 (TCP and UDP)
  • syslog data in port 51415
  • gelf in port 12201/udp
  • beats in port 51044
  • http in port 8080

Container execution

If you are using LOGSPOUT be sure that it ignores this container or you'll get an infinite loop of logging.

By default it tries to send the logs to the Elasticsearch on the address "elasticsearch:9200".

docker service create \
  --name logstash \
  -e LOGSPOUT=ignore \
  basi/logstash

The default configuration assumes that the Elasticsearch server is in the address http://elasticsearch:9200, without user/pass.

This can be changed using the environment variables:

  • DEBUG
  • ELASTICSEARCH_ADDR
  • ELASTICSEARCH_PORT
  • ELASTICSEARCH_SSL
  • ELASTICSEARCH_USER
  • ELASTICSEARCH_PASSWORD

For example:

docker service create \
  --name logstash \
  -e DEBUG=false \
  -e LOGSPOUT=ignore \
  -e ELASTICSEARCH_SSL=true \
  -e ELASTICSEARCH_USER=user \
  -e ELASTICSEARCH_PASSWORD=password \
  -e ELASTICSEARCH_ADDR=myelastic.example.com \
  -e ELASTICSEARCH_PORT=9201 \
  basi/logstash
Docker Pull Command
Owner
basi
Source Repository