This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Elastic Logging Plugin usage examples
editElastic Logging Plugin usage examples
editThe following examples show common configurations for the Elastic Logging Plugin.
Send Docker logs to Elasticsearch
editDocker run command:
docker run --log-driver=elastic/elastic-logging-plugin:8.17.0 \ --log-opt hosts="myhost:9200" \ --log-opt user="myusername" \ --log-opt password="mypassword" \ -it debian:jessie /bin/bash
Daemon configuration:
{ "log-driver" : "elastic/elastic-logging-plugin:8.17.0", "log-opts" : { "hosts" : "myhost:9200", "user" : "myusername", "password" : "mypassword", } }
Send Docker logs to Elasticsearch Service on Elastic Cloud
editDocker run command:
docker run --log-driver=elastic/elastic-logging-plugin:8.17.0 \ --log-opt cloud_id="MyElasticStack:daMbY2VudHJhbDekZ2NwLmN4b3VkLmVzLmliJDVkYmQwtGJiYjs0NTRiN4Q5ODJmNGUwm1IxZmFkNjM5JDFiNjdkMDE4MTgxMTQzNTM5ZGFiYWJjZmY0OWIyYWE5" \ --log-opt cloud_auth="myusername:mypassword" \ -it debian:jessie /bin/bash
Daemon configuration:
{ "log-driver" : "elastic/elastic-logging-plugin:8.17.0", "log-opts" : { "cloud_id" : "MyElasticStack:daMbY2VudHJhbDekZ2NwLmN4b3VkLmVzLmliJDVkYmQwtGJiYjs0NTRiN4Q5ODJmNGUwm1IxZmFkNjM5JDFiNjdkMDE4MTgxMTQzNTM5ZGFiYWJjZmY0OWIyYWE5", "cloud_auth" : "myusername:mypassword", "output.elasticsearch.index" : "elastic-log-driver-%{+yyyy.MM.dd}" } }
Specify a custom index and template
editDocker run command:
docker run --log-driver=elastic/elastic-logging-plugin:8.17.0 \ --log-opt hosts="myhost:9200" \ --log-opt user="myusername" \ --log-opt password="mypassword" \ --log-opt index="eld-%{[agent.version]}-%{+yyyy.MM.dd}" \ -it debian:jessie /bin/bash
Daemon configuration:
{ "log-driver" : "elastic/elastic-logging-plugin:8.17.0", "log-opts" : { "hosts" : "myhost:9200", "user" : "myusername", "index" : "eld-%{[agent.version]}-%{+yyyy.MM.dd}", "password" : "mypassword", } }