# Logstash

> Sketch Logstash / ingest pipelines — input, filter (grok/json/mutate), ES output. No prod deploy.

- Skill: `khaitrang1995/logstash` (Agent Skill)
- Install (CLI): `npx skillmds@latest add khaitrang1995/logstash`
- Raw SKILL.md: https://api.skillmd.com/api/skills/khaitrang1995/logstash/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: KhaiTrang1995 (https://skillmd.com/u/khaitrang1995)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/khaitrang1995/logstash

---


# /logstash

## Examples

```
/logstash booking-api --format json
/logstash nginx-access @access-sample.log
```

## Process

1. Prefer a real sample line for grok  
2. Input / filter / ECS-ish fields / ES output  
3. Failure tags / DLQ note  
4. L1 → `docs/ops/elk/pipelines/{name}.conf`

## Output

`@_templates/logstash-pipeline.conf`