elastic/logstash

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

14925 stars · 3503 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Logstash is an open-source server-side data processing pipeline that ingests data from multiple sources simultaneously, transforms it, and ships it to a destination such as Elasticsearch. It features a plugin architecture with over 200 input, filter, and output plugins for parsing, enriching, and routing logs and events in real time.

Use cases

• collect and centralize logs from multiple servers
• parse unstructured log lines with grok into structured fields
• transform and enrich events before indexing into Elasticsearch
• ship metrics and application data to a datastore in real time
• anonymize or drop sensitive fields from log events
• ingest data from AWS services, databases, and message queues
• build a real-time data processing pipeline for observability

When to choose

• you need a mature, extensible log and event ingestion pipeline
• you use the Elastic Stack and want tight Elasticsearch integration
• you need to parse, filter, and enrich heterogeneous data sources
• you want a large plugin ecosystem and community support

When to avoid

• you need a lightweight log shipper with minimal resource usage (consider Beats or Fluent Bit)
• you only need simple forwarding without transformation
• you want a code-first stream processing framework rather than config-driven pipelines

Facets

application · maturity stable

etl streaming logging data-science developer-tools monitoring big-data analytics jvm cross-platform self-hosted log-pipeline data-processing elastic-stack log-ingestion event-processing plugin-ecosystem data-engineering devops docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="elastic/logstash")