Logstash has two types of configuration files: pipeline configuration files, which define the Logstash processingpipeline, and settings files, which specify options that control Logstash startup and execution.
You create pipeline configuration files when you define the stages of your Logstash processing pipeline. On deb andrpm, you place the pipeline configuration files in the /etc/logstash/conf.d
directory. Logstash tries to load onlyfiles with .conf
extension in the /etc/logstash/conf.d directory
and ignores all other files.
See Configuring Logstash for more info.
The settings files are already defined in the Logstash installation. Logstash includes the following settings files:
logstash.yml
logstash.yml
file. See
logstash.yml for more info.
pipelines.yml
jvm.options
log4j2.properties
log4j 2
library. See
Log4j2 configuration for more info.
startup.options
(Linux)
system-install
script in
/usr/share/logstash/bin
to build the appropriate startup script for your system. When you install the Logstash package, the
system-install
script executes at the end of the installation process and uses the settings specified in
startup.options
to set options such as the user, group, service name, and service description. By default, Logstash services are installed under the user
logstash
. The
startup.options
file makes it easier for you to install multiple instances of the Logstash service. You can copy the file and change the values for specific settings. Note that the
startup.options
file is not read at startup. If you want to change the Logstash startup script (for example, to change the Logstash user or read from a different configuration path), you must re-run the
system-install
script (as root) to pass in the new settings.