S, M, and L Logstash Architectures: Reaching For the Sky

Wednesday, December 7, 2016 - 4:00pm5:30pm

Jamie Riedesel, HelloSign


LogStash can scale. From all-in-one boxes (S) to architectures that involve routing log-lines to separate parsing clusters (L), LogStash can do it. If you have the foundations of LogStash down, we can talk about scaling it up. From architectures with syslog as the collector and LogStash purely as a parser, to architectures where LogStash is acting as both collector and parser, you will run into scaling issues as you get bigger. We will go over scaled up and out architectures, and equip you with the knowledge of what XL might look like for you.

Who should attend:
People with experience with LogStash, looking to find out how to make it scale, and do more.

Take back to work:
People will come away with knowledge of various scaled out LogStash architectures, and how to set up ElasticSearch.

Topics include:
LogStash, ElasticSearch, Syslog, TSDB, Collectd, and AWS

Jamie Riedesel, HelloSign

Jamie Riedesel is a DevOps Engineer at HelloSign and has been performing acts of systems administration and engineering since 1997, and more dev-like things since 2010. She moved from corporate IT to the startup space in 2010 and experienced the good kind of culture shock. Jamie has been blogging as sysadmin1138 since 2004, a community elected moderator on ServerFault since 2010, and awarded the Chuck Yerkes community award by LOPSA in 2015.

@conference {208447,
author = {Jamie Riedesel},
title = {S, M, and L Logstash Architectures: Reaching For the Sky},
year = {2016},
address = {Boston, MA},
publisher = {USENIX Association},
month = dec