1

I see that the Logstash 1.4.2 tar install via the below curl command is around 140 MB & am wondering if there is a way to get smaller footprint download without the extra baggage of Kibana, ElasticSearch, some filters, inputs,outputs. Is it safe to purge the vendor directory. The latest version of Logstash 1.5.0 appears to have grown bigger in size & is about 160MB. Would appreciate if anyone can provide any recommendation and /or inputs around the same.

curl -s https://download.elasticsearch.org/logstash/logstash/logstash-1.4.2.tar.gz | tar xz
John C
  • 1,795
  • 4
  • 27
  • 42

1 Answers1

1

Instead of manually deleting stuff from the Logstash distribution that you don't think you need in order to save a few tens of megabytes, just use a more light-weight shipper and do all processing on machine that isn't so low on disk space. Some of your choices are logstash-forwarder, Log Courier, and NXLog. These are just a handful of megabytes each (and use far less RAM since they don't run through the JVM).

Alternatively, NXLog's configuration language is quite rich and you can probably use that for doing the processing you need on your leaf nodes without the need for a separate machine for the processing of logs. NXLog's overhead is quite small.

Magnus Bäck
  • 11,381
  • 3
  • 47
  • 59