Docs
You are looking at preliminary documentation for a future release. Not what you want? See the current release documentation.
Logstash Reference [5.x] » Output plugins » exec
«  email     file  »

execedit

This output will run a command for any matching event. Example:

output {
  exec {
    type => abuse
    command => "iptables -A INPUT -s %{clientip} -j DROP"
  }
}

Run subprocesses via system ruby function

Warning

if you want it non-blocking you should use & or dtach or other such techniques

 

Synopsisedit

This plugin supports the following configuration options:

Required configuration options:

exec {
    command => ...
}

Available configuration options:

Setting Input typeRequiredDefault value

codec

codec

No

"plain"

command

string

Yes

workers

number

No

1

Detailsedit

 

codecedit

  • Value type is codec
  • Default value is "plain"

The codec used for output data. Output codecs are a convenient method for encoding your data before it leaves the output, without needing a separate filter in your Logstash pipeline.

commandedit

  • This is a required setting.
  • Value type is string
  • There is no default value for this setting.

Command line to execute via subprocess. Use dtach or screen to make it non blocking

workersedit

  • Value type is number
  • Default value is 1

The number of workers to use for this output. Note that this setting may not be useful for all outputs.

«  email     file  »