Page 1 of 1

How do I install additional Logstash Plugins??

Posted: Tue Sep 01, 2015 8:26 am
by prhunixadmin
I'm receiving logs in ArcSight format and I'd like to install the logstash-codec-cef logstash plugin so the nagioslogserver will understand what these messages are.

Can someone please guide me on installation of additional non standard logstash plugins? This plugin is located on github at this url. https://github.com/logstash-plugins/logstash-codec-cef/

Thanks,

Greg

Re: How do I install additional Logstash Plugins??

Posted: Tue Sep 01, 2015 9:58 am
by jolson
Give this a try:

Code: Select all

/usr/local/nagioslogserver/logstash/bin/plugin install logstash-codec-cef
The above procedure worked for me on Nagios Log Server version 2015R2.2.

Jesse

Re: How do I install additional Logstash Plugins??

Posted: Tue Sep 01, 2015 10:22 am
by prhunixadmin
That worked and also resolved my formatting issues with my other ticket about the splunk input.

Thank you so much Jessie!!

Re: How do I install additional Logstash Plugins??

Posted: Tue Sep 01, 2015 10:37 am
by jolson
Happy to help. ;)

Would it be fine if I closed this thread?

Re: How do I install additional Logstash Plugins??

Posted: Tue Sep 01, 2015 11:08 am
by prhunixadmin
Yes close both. They have been resolved.