Alibaba Cloud Logstash allows you to specify a keyword and a time range in the Elasticsearch console to query specific logs of your Logstash cluster. The logs help you identify cluster issues and perform cluster O&M in an efficient manner. This topic describes common types of logs and how to query logs.
Procedure
Common types of logs
Cluster logs

Parameter | Description |
---|---|
Time | The time when the log was generated. |
Node IP | The IP address of the node that generates the log. |
Content | The details about the log. This parameter contains the following fields:
|
GC logs

Slow logs

Debug logs
If a Logstash pipeline is incorrectly configured, the output data of the pipeline may not meet your requirements. In this case, you may need to repeatedly check the format of the data in the destination and modify the pipeline configurations in the Kibana console. This increases time and labor costs. To resolve this issue, you can use the pipeline configuration debugging feature provided by Logstash. This feature allows you to view the output data of your Logstash pipeline in debug logs in the Kibana console after you create and deploy the pipeline. This helps reduce your debugging costs. For more information, see Use the pipeline configuration debugging feature.
- Install the logstash-output-file_extend plug-in for the cluster. For more information, see Install and remove a plug-in.
- Configure the file_extend parameter in the output configuration of the pipeline. For more information, see Use configuration files to manage pipelines.
