Using Logstash with TNT4J-Streams

This article explains how to configure and run TNT4J-Streams with Logstash for ingesting and parsing log data.

1. Configure tnt4j.properties and change line by adding your jKoolCloud token.

   event.sink.factory.Token: ##############################

2. Configure the supplied sample Logstash configuration.

   • Change the log file path to your log path or.
   • Configure input according to your needs.

3. Configure your parsing properties in tnt-data-source.xml
   The supplied sample is suitable for a common Apache log.

   NOTE: Parsers can be mapped to activity event data from different sources using tags. One parser can be mapped to multiple tags. If no tag is defined for parser then such parser is applied to all activities.

4. Start TNT4J-Streams agent by running run.bat.

5. Copy sample configuration to [logstashdir]/bin/ (or other directory of your choice).

6. Start Logstash with supplied sample Logstash configuration:

   [logstashdir]/bin/logstash -f ls-tcp.cfg