Elastic

Learn how to send events to Logstash to use with Elastic from Couchdrop

Overview

Couchdrop can send selected events to Logstash for centralized logging and downstream processing.

Configuration is completed in two parts:

1. Configure Logstash — Set up the Logstash HTTP input plugin so it can receive events from Couchdrop, then collect the connection details Couchdrop will use.

2. Configure Couchdrop — Enter those Logstash connection details in Couchdrop, choose which events to send, and save the configuration.

Configure Logstash settings in Elastic

Before you start

To configure Logstash for Couchdrop, you will need:

• A Logstash instance.

• The Logstash HTTP input plugin configured to receive events.

1

Configure the HTTP input

Configure the Logstash HTTP input plugin so Logstash can receive events from Couchdrop.

For more information, see the Logstash HTTP input plugin documentation.

2

Collect your Logstash connection details

Before configuring Couchdrop, make sure you have:

• Elastic Username

• Elastic Password

• Elastic URL

Set up Logstash logging in Couchdrop

Before you start

To configure Logstash logging in Couchdrop, you will need:

• A Couchdrop account with access to the SIEM logging settings.

• Your Elastic username, password, and URL.

1

Open Logstash logging settings

Log in to Couchdrop and navigate to Admin Panel → Logging.

Select Connect or Manage on the Elastic provider.

2

Select events to send

Select the Couchdrop events you want to send to Logstash.

3

Enter your Logstash configuration

Configure the required Logstash fields:

• Elastic Username

• Elastic Password

• Elastic URL

4

Save the configuration

Click Save Updates.