dperson/logstash repository overview

⁠Logstash

Logstash docker container

⁠What is Logstash?

logstash is a tool for managing events and logs. You can use it to collect logs, parse them, and store them for later use (like, for searching). Speaking of searching, logstash comes with a web interface for searching and drilling into all of your logs.

⁠How to use this image

When started Logstash container will listen on ports 5000 and 5000/udp.

⁠Hosting a Logstash instance

sudo docker run -it -d dperson/logstash

⁠Configuration

sudo docker run -it --rm dperson/logstash -h

Usage: logstash.sh [-opt] [command]
Options (fields in '[]' are optional, '<>' are required):
    -h          This help
    -t ""       Configure timezone
                possible arg: "[timezone]" - zoneinfo timezone for container

The 'command' (if provided and valid) will be run instead of logstash

ENVIRONMENT VARIABLES

• TZ - As above, configure the zoneinfo timezone, IE EST5EDT
• USERID - Set the UID for the app user
• GROUPID - Set the GID for the app user

⁠Examples

Any of the commands can be run at creation with docker run or later with docker exec -it log logstash.sh (as of version 1.3 of docker).

⁠Setting the Timezone

sudo docker run -it -p 5000:5000 -p 5000:5000/udp -d dperson/logstash \
            -t EST5EDT

OR using environment variables

sudo docker run -it -p 5000:5000 -p 5000:5000/udp -e TZ=EST5EDT -d \
            dperson/logstash

Will get you the same settings as

sudo docker run -it --name log -p 5000:5000 -p 5000:5000/udp \
            -d dperson/logstash
sudo docker exec -it log logstash.sh -t EST5EDT ls -AlF /etc/localtime
sudo docker restart log

⁠Complex configuration

Example configs⁠

If you wish to adapt the default configuration, use something like the following to copy it from a running container:

sudo docker cp log:/etc/logstash /some/path

You can use the modified configuration with:

sudo docker run -it --name es -p 5000:5000 -p 5000:5000/udp \
            -v /some/path:/etc/logstash:ro \
            -d dperson/logstash

⁠User Feedback

⁠Issues

If you have any problems with or questions about this image, please contact me through a GitHub issue⁠.