"Tail" a logstash server query
- by phatmanace
Assuming I have a logstash server chocked full of logs being loaded regularly, is there a reasonably elegant way that I can tail the results of a continuously executing query on the logstash server and show this in a terminal window
e.g
some-special-logstash-command.sh | egrep -v "(searchword1|searchword2)"
the idea being that the command pipes stuff out of logstash and to my grep query that filters and shows me the filtered output for.
.. of course if there is a logstash command that can do the grep piece for me as well, then that works too :)
motivation for doing this, is that assuming all of my events from my estate is being loaded into logstash, then would be nice to have a terminal window with a continuous tail of interesting events as they occur scrolling past the screen.
-Ace
