Reviewing the Logstash Configuration Files (Optional)

5.8 Reviewing the Logstash Configuration Files (Optional)

When you install Logstash, the DPK installation creates configuration files in LOGSTASH_HOME/pt/config. The values in the files are supplied by the installation process, so you should not need to make any changes.

JsonLogstash.properties includes the following parameters:
- IBServiceURL — the Integration Broker REST service URL
- JSONLocation — the location that you specified for the JSON files
- IBusername — encrypted name for the Integration Broker user
- IBpassword — encrypted password for the Integration Broker user
- The file also includes SSL-related parameters, which are described elsewhere in this documentation.
  
  See "Deploying the OpenSearch, OpenSearch Dashboards, and Logstash Deployment Package," Using Logstash with an SSL Setup.
LogstashPipeline.CONF includes input and output values for the Logstash event processing pipeline.

See the Logstash information on the Elastic web site for a description of the Logstash pipeline process.

The file has the following format:
```
input { 
  jmx {
    path => "C:\opensearch\pt\logstash-9.1.3\pt\jmxmonitor"
    polling_frequency => 5
    type => "jmx"
    nb_thread => 15
  }
 }
output {
opensearch {
hosts => "server.example.com:9200"
index => "psft_hc_metrics"
user => "osadmin"
password => "encrypted_password"
ecs_compatibility => disabled
}
}
```
The password in the output section is the osadmin password, which is encrypted using the key available in the psvault.

Use these guidelines if you must change the configuration files:

Enter the same value for the path in the input section of LogstashPipeline.CONF and the JSONLocation in the JsonLogstash.properties file.
The polling_frequency parameter in the input section of LogstashPipeline.CONF is the frequency with which the JMX data is pulled from JMX agents and pushed to OpenSearch.

This value is mandatory. There is no default or recommended value. Set the value based on the requirements of your environment.
The nb_thread parameter in the input section of LogstashPipeline.CONF, which refers to the number of threads used for retrieving data, can be increased or decreased based on your environment if necessary.