Logstash: Location of logstash.yml?

Created on 22 Jan 2017 · 5Comments · Source: elastic/logstash

Can any show me where to put this logstash.yml file for logstash to read config from?

Old tutorials are at /etc/logstash but because I installed via

$ brew install logstash

so have no idea where to start, even though I can find a copy from

https://github.com/elastic/logstash/blob/master/config/logstash.yml

This tutorial says /etc/logstash/logstash.yml but I could not find it, or I need to manually create it?

https://www.elastic.co/webinars/getting-started-logstash

Source

scheung38

Most helpful comment

Brew has done something unique with it. Brew tends to keep configurations in /usr/local/etc, but nothing of the sort seems to have been done for Logstash. You can read up a bit more on the logstash formula here.

You can find the logstash.yml file in /usr/local/Cellar/logstash/5.1.2/libexec/config

For your sake, I recommend copying the entire config directory to somewhere else, like /usr/local/etc/logstash, and running with the --path.config flag set to that path.

We are approaching the author of the brew config to see if we can change the config to be in /usr/local/etc/logstash

untergeek on 30 Jan 2017

👍25

All 5 comments

According to the docs, the config file is located at LOGSTASH_HOME/config. You can either (1) find out the value of LOGSTASH_HOME, or (2) run logstash with strace and see which file it is trying to access.

nealp9084 on 23 Jan 2017

Hi, I have similar issue. According to the v.5.1 docs, logstah.yml is located in LOGSTASH_HOME/config. But config file is located in /etc/logstash. I've installed Logstash via package system on Debian 8.7 (TKL Core) by following the docs. In this point docs are wrong. Anyway Directory layout documentation mentions /etc/logstash for packages and LOGSTASH_HOME/config for zip/tar which is ok.

This issue will be probably in the Elasticsearch and Kibana too.

dmnc-net on 30 Jan 2017

You can find the logstash.yml file in /usr/local/Cellar/logstash/5.1.2/libexec/config

For your sake, I recommend copying the entire config directory to somewhere else, like /usr/local/etc/logstash, and running with the --path.config flag set to that path.

We are approaching the author of the brew config to see if we can change the config to be in /usr/local/etc/logstash

untergeek on 30 Jan 2017

👍25

Where is conf.d directory in this setup where I can set *.conf files?

swapnilbagadia on 20 May 2018

Where is conf.d directory in this setup where I can set *.conf files?

@swapnilbagadia I think that directory has changed in more recent releases of logstash to '$LOGSTASH_HOME/config'. So the response provided by @untergeek should answer your question as well.