How do I install additional Logstash Plugins??

[prhunixadmin]

I'm receiving logs in ArcSight format and I'd like to install the logstash-codec-cef logstash plugin so the nagioslogserver will understand what these messages are.

Can someone please guide me on installation of additional non standard logstash plugins? This plugin is located on github at this url. https://github.com/logstash-plugins/logstash-codec-cef/

Thanks,

Greg

[jolson]

Give this a try:

Code: Select all

/usr/local/nagioslogserver/logstash/bin/plugin install logstash-codec-cef

The above procedure worked for me on Nagios Log Server version 2015R2.2.

Jesse

[prhunixadmin]

That worked and also resolved my formatting issues with my other ticket about the splunk input.

Thank you so much Jessie!!

[jolson]

Happy to help.

Would it be fine if I closed this thread?

[prhunixadmin]

Yes close both. They have been resolved.