Stuff

OPS root@logging:~# cat /usr/local/logstash/etc/logstash.conf 
input {
  tcp { 
    type => "apache-access"
    port => 4444
  } 

  file { 
   type => "qaperf-all"
   path => [
		"/mnt/centralized_logs/scribe/qaperf1/*"
	]
  } 

  file {
    type => "apache-access"
    path => [ 
		"/mnt/centralized_logs/scribe/portal-access/*",
     		"/mnt/centralized_logs/scribe/intellicus-access/*"
  	]
  }

  file {
    type => "apache-error"
    path => [ 
		"/mnt/centralized_logs/scribe/portal-error/*",
		"/mnt/centralized_logs/scribe/intellicus-error/*"
  	]
  }

  syslog {
    format         => "plain"
    type           => "linux-syslog"
    debug          => true
  }
}

filter {
  grok {
    type => "apache-access"
    pattern => "%{COMBINEDAPACHELOG} %{QS}"
  }

  date {
    type => "apache-access"
    timestamp => "dd/MMM/yyyy:HH:mm:ss Z"
  }
}

output {
  stdout { }
  elasticsearch { host => "localhost" }
}