Logstash logo

Logstash

Server-side data processing pipeline for ingesting, transforming, and forwarding logs and events

Open Source Alternative to
Repository activity
  • Stars14.9k
  • Forks3.5k
  • Open Issues2.2k
elastic-logstash health score - Linux Foundation Insights
License

Other

Languages
  • Java
  • Ruby
  • Shell
Logstash screenshot

About Logstash

Logstash is a server-side data processing pipeline for collecting data from many sources at once, transforming it, and sending it to a destination you choose. It is part of the Elastic Stack with Beats, Elasticsearch, and Kibana, and it is built for log and event transport plus general data processing.

It has over 200 plugins and supports writing your own plugins. The default plugin set includes 80+ plugins for connecting to multiple data sources, performing transformations, and sending results to Elasticsearch and other destinations. Official binaries and deb/rpm packages are available for supported platforms.

Logstash ships with Java and JRuby at its core, and plugins live in separate repositories under the logstash-plugins organization. The codebase mixes Elastic-Licensed X-Pack features with Apache 2.0 OSS code, so it is not fully OSI-open; an OSS=true build runs the Apache-licensed parts only. You self-manage the install from binaries or deb/rpm packages.

Key features

  • Ingests data from multiple sources simultaneously
  • Transforms and enriches logs, events, and other data
  • Over 200 plugins, plus custom plugin support
  • 80+ default plugins for common data flows
  • Outputs to Elasticsearch and other destinations

Details

First released
2010
Platforms
Linux · Windows · macOS
Language
Java · JRuby
Plugins
200+ total · 80+ default
Deployment
Self-managed install
License
Elastic License / Apache 2.0