Example Logstash Configuration

Example logstash.conf for unencrypted TCP transport:

input {
    tcp {
        host => "127.0.0.1"
        port => 5959
        mode => server
        codec => json_lines {}
    }
}

Example logstash.conf for SSL-encrypted TCP transport:

input {
    tcp {
        host => "127.0.0.1"
        port => 5958
        mode => server
        codec => json_lines {}

        ssl_enable => true
        ssl_verify => true
        ssl_extra_chain_certs => ["/etc/ssl/certs/logstash_ca.crt"]
        ssl_cert => "/etc/ssl/certs/logstash.crt"
        ssl_key => "/etc/ssl/private/logstash.key"
    }
}

Example logstash.conf for SSL-encrypted Beats transport:

input {
    beats {
        host            => "127.0.0.1"
        port            => 5957
        ssl             => true
        ssl             => true
        ssl_verify_mode => "peer"
        ssl_certificate_authorities => ["/etc/ssl/certs/logstash_ca.crt"]
        ssl_certificate => "/etc/ssl/certs/logstash.crt"
        ssl_key         => "/etc/ssl/private/logstash.p8"
    }
}

Example logstash.conf for HTTP transport with basic authentication:

input {
    http {
        host      => "127.0.0.1"
        port      => 5959
        user      => "logstash"
        password  => "testing"
        codec     => "json"
    }
}