本文是elasticsearch官方文檔logstash的翻譯寡壮，你也可<a >查看原文</a>
注：Logstash意思是日志存儲(chǔ)，下文中對(duì)本詞使用英文包雀。
Logstash 介紹
Logstash is an open source data collection engine with real-time pipelining capabilities（功能）. Logstash can dynamically unify（統(tǒng)一） data from disparate（不同的） sources and normalize the data into destinations（目的地） of your choice. Cleanse（凈化） and democratize（大眾化） all your data for diverse（不同的） advanced downstream（下游） analytics and visualization（形象化） use cases.
Logstash 是開(kāi)源的具有實(shí)時(shí)輸入數(shù)據(jù)能力的數(shù)據(jù)收集引擎鹤盒。Logstash可以把來(lái)自不同的源的數(shù)據(jù)動(dòng)態(tài)的寫(xiě)入你選擇的目的地并對(duì)輸入的數(shù)據(jù)進(jìn)行規(guī)范化。根據(jù)需求進(jìn)行分析和展示具钥。
While Logstash originally（最初） drove innovation（創(chuàng)新） in log collection, its capabilities extend well beyond（超越） that use case. Any type of event can be enriched and transformed（轉(zhuǎn)變） with a broad（寬的） array of input, filter, and output plugins, with many native codecs further（更好地） simplifying（簡(jiǎn)化） the ingestion（吸收） process. Logstash accelerates（加速） your insights（洞察力） by harnessing（利用） a greater volume and variety（多樣） of data.
Logstash升級(jí)版本的時(shí)候，老版本對(duì)新版本的兼容新很好液兽。事件的類(lèi)型是一組input骂删、filter、和output插件四啰，所以可以很方便擴(kuò)展宁玫，可以使用本地編碼更好簡(jiǎn)化吸收日志的過(guò)程。
The Power of Logstash
The ingestion workhorse for Elasticsearch and more
Horizontally（水平） scalable（可擴(kuò)展的） data processing pipeline with strong Elasticsearch and Kibana synergy（協(xié)同）
通過(guò)Elasticearch和kibana進(jìn)行協(xié)同柑晒，實(shí)現(xiàn)數(shù)據(jù)處理的水平擴(kuò)展
Pluggable pipeline architecture
Mix, match, and orchestrate different inputs, filters, and outputs to play in pipeline harmony
插件化管飽結(jié)構(gòu)
混合,匹配和協(xié)調(diào)不同的 inputs, filters, and outputs讓管道和諧而不發(fā)生沖突欧瘪。
Community-extensible and developer-friendly plugin ecosystem
Over 200 plugins available, plus the flexibility of creating and contributing your own
社區(qū)可擴(kuò)展和開(kāi)發(fā)者友好的插件生態(tài)系統(tǒng)
超過(guò)200個(gè)插件可以使用，你也可以很快速創(chuàng)建和貢獻(xiàn)你的插件
Logstash Loves Data
Collect more, so you can know more. Logstash welcomes data of all shapes and sizes.
搜集更多,這樣你就可以知道更多匙赞。Logstash可以存儲(chǔ)各種各樣的數(shù)據(jù)佛掖。
Logs and Metrics
Where it all started.
- Handle all types of logging data
- Easily ingest（攝取） a multitude（大批的） of web logs like Apache, and application logs like log4j for Java
- Capture many other log formats like syslog, Windows event logs, networking and firewall logs, and more
- Enjoy complementary（補(bǔ)充的） secure log forwarding capabilities with Filebeat
- Collect metrics from Ganglia, collectd, NetFlow, JMX, and many other infrastructure（基礎(chǔ)設(shè)施） and application platforms over TCP and UDP
日志和度量
這是一切開(kāi)始的地方涌庭。
- 處理很多類(lèi)型的日志
- 那些可以容易獲取的<code>Apache</code>之類(lèi)的web日志芥被，應(yīng)用日志如java的log4J
- 其他的格式化的日志如<i>syslog,Windows event logs,網(wǎng)絡(luò)和防火墻日志等等</i>
- Filebeat轉(zhuǎn)發(fā)來(lái)的安全日志。
- Ganglia, collectd, NetFlow, JMX, 和一些其他的（基礎(chǔ)設(shè)施） and 基于 TCP and UDP的應(yīng)用平臺(tái)
The Web
Unlock the World Wide Web.
- Transform HTTP requests into events (blog)
- Consume（消耗） from web service firehoses（消防帶） like Twitter for social sentiment（情感） analysis
- Webhook（網(wǎng)絡(luò)連接） support for GitHub, HipChat, JIRA, and countless（無(wú)數(shù)的） other applications
- Enables many Watcher alerting use cases
- Create events by polling（投票） HTTP endpoints on demand (blog)
- Universally（普遍） capture health, performance, metrics, and other types of data from web application interfaces
- Perfect for scenarios where the control of polling is preferred over receiving
解鎖萬(wàn)維網(wǎng)坐榆。
- Http事件
Data Stores and Streams
Discover more value from the data you already own.
- Better understand your data from any relational database or NoSQL store with a JDBC interface (blog)
- Unify（統(tǒng)一） diverse（不同的） data streams from messaging queues like Apache Kafka (blog), RabbitMQ, Amazon SQS, and ZeroMQ
數(shù)據(jù)存儲(chǔ)和數(shù)據(jù)流
Sensors and IoT
Explore an expansive breadth of other data.
- In this age of technological advancement, the massive IoT world unleashes endless use cases through capturing and harnessing data from connected sensors.
- Logstash is the common event collection backbone for ingestion of data shipped from mobile devices to intelligent homes, connected vehicles, healthcare sensors, and many other industry specific applications.
- Watch as Logstash, in conjunction with the broader ELK stack, centralizes and enriches sensor data to gain deeper knowledge regarding a residential home.
Easily Enrich Everything
The better the data, the better the knowledge. Clean and transform your data during ingestion to gain near real-time insights immediately at index or output time. Logstash comes out-of-box with many aggregations and mutations along with pattern matching, geo mapping, and dynamic lookup capabilities.
- Grok is the bread and butter of Logstash filters and is used ubiquitously to derive structure out of unstructured data. Enjoy a wealth of integrated patterns aimed to help quickly resolve web, systems, networking, and other types of event formats.
- Expand your horizons by deciphering geo coordinates from IP addresses, normalizing datecomplexity, simplifying key-value pairs and CSV data, anonymizing sensitive information, and further enriching your data with local lookups or Elasticsearch queries.
- Codecs are often used to ease the processing of common event structures like JSON and multilineevents.
Choose Your Stash
Route your data where it matters most. Unlock various downstream analytical and operational use cases by storing, analyzing, and taking action on your data.
Analysis
Elasticsearch
Data stores such as MongoDB and Riak
Archiving
HDFS
S3
Google Cloud Storage
Monitoring
Nagios
Ganglia
Zabbix
Graphite
Datadog
CloudWatch
Alerting
Watcher with Elasticsearch
Email
Pagerduty
HipChat
IRC
SNS
