million12/logstash-forwarder repository overview

⁠Logstash-Forwarder Docker Image

Logstash Forwarder⁠ Docker Image⁠ for logstash/elasticsearch logging deployments. Build from official logstash-forwarder repo and locked to release v0.4.0.
Image was stripped down from not needed packages and from being ~650M now it's only ~335M

⁠SSL Certificates and Log Files

Logstash server ssl certificates need to be placed in /etc/logstash/ssl/ directory.

Default config is set to read system.log file from /data/log/system.log.
Example of sharing system log with docker image.

-v /var/log/system.log:/data/log/system.log

⁠Logstash IP (Environmental Variable)

$LOGSTASH_IP environmental variable with IP address to logstash server.

⁠RUN

Run on the same host as logstash server

docker run \
-d --name forwarder \
-e LOGSTASH_IP=logstash_server_ip \
-v /var/log/system.log:/data/log/system.log \
-v /etc/logstash/ssl:/logstash/ssl \
million12/logstash-forwarder

FYI: Certificates should match logstash server certificates.

⁠Logging

If you need to log more than just system.log please edit forwarder.conf file according the logstash/forwarder manual⁠.

Otherwise you can mount the directory with your host specific forwarder.conf using command -v. -v /your-dir:/etc/forwarder/

⁠Authors

Author: Marcin Ryzycki ([email protected]⁠)
Author: Przemyslaw Ozgo ([email protected]⁠)

---

Sponsored by Typostrap.io - the new prototyping tool⁠ for building highly-interactive prototypes of your website or web app. Built on top of TYPO3 Neos CMS and Zurb Foundation framework.