7. # /etc/logstash/conf.d/logstash.conf
input {
<..some inputs here (see
https://www.elastic.co/guide/en/logstash/current/input-p
lugins.html) ..>
}
filter {
<..some filters here (see
https://www.elastic.co/guide/en/logstash/current/filter-
plugins.html)..>
}
output {
<..some outputs here (see
https://www.elastic.co/guide/en/logstash/current/output-
plugins.html)..>
}
8. What are logstash plugins?
Why a logstash icinga output plugin?
Where to find the plugin?
https://github.com/Icinga/logstash-output-icinga/
Actions the plugin can take:
Action Description
process-check-result Process a check result
send-custom-notification Send a custom notification
add-comment Add a comment from an author.
remove-comment Remove all comments created by a certain author.
schedule-downtime Schedule a downtime for a host or service.
remove-downtime Remove all downtimes created by a certain author.
9. # clone the repo
git clone https://github.com/icinga/logstash-output-icinga.git
cd logstash-output-icinga/
# build the gem
[root@icinga2-elastic logstash-output-icinga]# gem build
logstash-output-icinga.gemspec
WARNING: no description specified
Successfully built RubyGem
Name: logstash-output-icinga
Version: 1.0.0
File: logstash-output-icinga-1.0.0.gem
# install the plugin
[root@icinga2-elastic bin]# ./logstash-plugin install --local
~/logstash-output-icinga/logstash-output-icinga-1.0.0.gem
Validating /root/logstash-output-icinga/logstash-output-icinga-1.0.0.gem
Installing logstash-output-icinga
Installation successful