Logstash
Centralize, transform & stash your data
Logstash is a free and open server-side data processing pipeline that ingests data from a multitude of sources, transforms it, and then sends it to your favorite "stash."
New to Logstash? Get up and running in no time.
Watch videoLearn how to parse and ingest CSV files into Elasticsearch with Logstash.
Watch videoBecome an Elastic Certified Engineer to grow opportunities as you work with Elasticsearch.
Learn moreIngest & More
Inputs, filters & outputs
Logstash dynamically ingests, transforms, and ships your data regardless of format or complexity. Derive structure from unstructured data with grok, decipher geo coordinates from IP addresses, anonymize or exclude sensitive fields, and ease overall processing.
Inputs
Ingest data of all shapes, sizes, and sources
Data is often scattered or siloed across many systems in many formats. Logstash supports a variety of inputs that pull in events from a multitude of common sources, all at the same time. Easily ingest from your logs, metrics, web applications, data stores, and various AWS services, all in continuous, streaming fashion.
Filters
Parse & transform your data on the fly
As data travels from source to store, Logstash filters parse each event, identify named fields to build structure, and transform them to converge on a common format for more powerful analysis and business value.
Logstash dynamically transforms and prepares your data regardless of format or complexity:
- Derive structure from unstructured data with grok
- Decipher geo coordinates from IP addresses
- Anonymize PII data, exclude sensitive fields completely
- Ease overall processing, independent of the data source, format, or schema.
The possibilities are endless with our rich library of filters and versatile Elastic Common Schema.
Outputs
Choose your stash, transport your data
While Elasticsearch is our go-to output that opens up a world of search and analytics possibilities, it’s not the only one available.
Logstash has a variety of outputs that let you route data where you want, giving you the flexibility to unlock a slew of downstream use cases.
Monitoring
Have full visibility into your deployments
Logstash pipelines are often multipurpose and can become sophisticated, making a strong understanding of pipeline performance, availability, and bottlenecks invaluable. With monitoring and pipeline viewer features, you can easily observe and study an active Logstash node or full deployment.
Migrating from Splunk to Elastic for logging?
We're here to help at every phase — from technical migration assistance to analyst training directly from Elastic experts.
Management & Orchestration
Centrally manage deployments with a single UI
Take the helm of your Logstash deployments with the Pipeline Management UI, which makes orchestrating and managing your pipelines a breeze. The management controls also integrate seamlessly with the built-in security features to prevent any unintended rewiring.
Trusted, used, and loved by
