ports/168266: New port: sysutils/logstash (log monitoring and collecting tool)

Mon Jul 8 21:10:01 UTC 2013

The following reply was made to PR ports/168266; it has been noted by GNATS.

From: "Regis A. Despres" <regis.despres at gmail.com>
To: bug-followup at FreeBSD.org
Cc: Guido Falsi <madpilot at FreeBSD.org>,
 "daniel at ish.com.au" <daniel at ish.com.au>
Subject: Re: ports/168266: New port: sysutils/logstash (log monitoring and collecting tool)
Date: Mon, 8 Jul 2013 23:00:38 +0200

 --Apple-Mail=_5DBA56F5-6601-44C8-A39F-C15CB61FE666
 Content-Transfer-Encoding: quoted-printable
 Content-Type: text/plain;
 	charset=us-ascii

 Hello hello,

 Tested on a fresh 9.1 install.
 Works like a charm.
 One character difference into logstash.conf.sample that was throwing a =
 error.=20

 Regards,

 --=20
 Regis A. Despres

 --Apple-Mail=_5DBA56F5-6601-44C8-A39F-C15CB61FE666
 Content-Disposition: attachment;
 	filename=logstash.shar
 Content-Type: application/octet-stream;
 	x-unix-mode=0644;
 	name="logstash.shar"
 Content-Transfer-Encoding: quoted-printable

 #=20This=20is=20a=20shell=20archive.=20=20Save=20it=20in=20a=20file,=20=
 remove=20anything=20before=0A#=20this=20line,=20and=20then=20unpack=20it=20=
 by=20entering=20"sh=20file".=20=20Note,=20it=20may=0A#=20create=20=
 directories;=20files=20and=20directories=20will=20be=20owned=20by=20you=20=
 and=0A#=20have=20default=20permissions.=0A#=0A#=20This=20archive=20=
 contains:=0A#=0A#=09logstash=0A#=09logstash/distinfo=0A#=09=
 logstash/Makefile=0A#=09logstash/pkg-descr=0A#=09logstash/pkg-plist=0A#=09=
 logstash/files=0A#=09logstash/files/logstash.conf.sample=0A#=09=
 logstash/files/elasticsearch.yml.sample=0A#=09logstash/files/logstash.in=0A=
 #=0Aecho=20c=20-=20logstash=0Amkdir=20-p=20logstash=20>=20/dev/null=20=
 2>&1=0Aecho=20x=20-=20logstash/distinfo=0Ased=20's/^X//'=20=
 >logstash/distinfo=20<<=20'8a7498b9608da6df76161c7712d9c4de'=0AXSHA256=20=
 (logstash-1.1.1-monolithic.jar)=20=3D=20=
 36f462b50efad0773b3ff94920d1de500faa236cb0d81439110b50b08978444d=0AXSIZE=20=
 (logstash-1.1.1-monolithic.jar)=20=3D=2053813805=0A=
 8a7498b9608da6df76161c7712d9c4de=0Aecho=20x=20-=20logstash/Makefile=0A=
 sed=20's/^X//'=20>logstash/Makefile=20<<=20=
 '58caac783f1d72028817b3f79ec306ec'=0AX#=20$FreeBSD$=0AX=0AXPORTNAME=3D=09=
 logstash=0AXPORTVERSION=3D=091.1.1=0AXCATEGORIES=3D=09sysutils=20java=0A=
 XMASTER_SITES=3D=09http://semicomplete.com/files/logstash/=0AXDISTNAME=3D=09=
 ${PORTNAME}-${PORTVERSION}-monolithic=0AXEXTRACT_SUFX=3D=09.jar=0A=
 XEXTRACT_ONLY=3D=0AX=0AXMAINTAINER=3D=09daniel at ish.com.au=0AXCOMMENT=3D=09=
 Tool=20for=20managing=20events=20and=20logs=0AX=0AXUSE_JAVA=3D=09yes=0A=
 XJAVA_VERSION=3D=091.5+=0AX=0AXNO_BUILD=3D=09yes=0AX=0AXUSE_RC_SUBR=3D=09=
 logstash=0AX=0AXLOGSTASH_HOME?=3D=09${PREFIX}/${PORTNAME}=0A=
 XLOGSTASH_HOME_REL?=3D=09${LOGSTASH_HOME:S,^${PREFIX}/,,}=0A=
 XLOGSTASH_JAR?=3D=09${DISTNAME}${EXTRACT_SUFX}=0AXLOGSTASH_RUN?=3D=09=
 /var/run/${PORTNAME}=0AXLOGSTASH_DATA_DIR?=3D=09/var/db/${PORTNAME}=0AX=0A=
 XSUB_LIST=3D=09LOGSTASH_DATA_DIR=3D${LOGSTASH_DATA_DIR}=20=
 JAVA_HOME=3D${JAVA_HOME}=20\=0AX=09=09LOGSTASH_HOME=3D${LOGSTASH_HOME}=20=
 LOGSTASH_JAR=3D${LOGSTASH_JAR}=0AXPLIST_SUB+=3D=09=
 LOGSTASH_HOME=3D${LOGSTASH_HOME_REL}=20LOGSTASH_JAR=3D${LOGSTASH_JAR}=20=
 \=0AX=09=09LOGSTASH_RUN=3D${LOGSTASH_RUN}=20\=0AX=09=09=
 LOGSTASH_DATA_DIR=3D${LOGSTASH_DATA_DIR}=0AX=0AXdo-install:=0AX=09=
 ${MKDIR}=20${LOGSTASH_RUN}=0AX=09${MKDIR}=20${ETCDIR}=0AX=09${MKDIR}=20=
 ${LOGSTASH_HOME}=0AX=09${MKDIR}=20${LOGSTASH_DATA_DIR}=0AX=09=
 ${INSTALL_DATA}=20${DISTDIR}/${DIST_SUBDIR}/${LOGSTASH_JAR}=20=
 ${LOGSTASH_HOME}=0AX=09${INSTALL_DATA}=20=
 ${FILESDIR}/logstash.conf.sample=20${ETCDIR}=0AX=09 at if=20[=20!=20-f=20=
 ${ETCDIR}/logstash.conf=20];=20then=20\=0AX=09=09${CP}=20-p=20=
 ${ETCDIR}/logstash.conf.sample=20${ETCDIR}/logstash.conf=20;=20\=0AX=09=
 fi=0AX=09${INSTALL_DATA}=20${FILESDIR}/elasticsearch.yml.sample=20=
 ${ETCDIR}=0AX=09 at if=20[=20!=20-f=20${ETCDIR}/elasticsearch.yml=20];=20=
 then=20\=0AX=09=09${CP}=20-p=20${ETCDIR}/elasticsearch.yml.sample=20=
 ${ETCDIR}/elasticsearch.yml=20;=20\=0AX=09fi=0AX=0AX.include=20=
 <bsd.port.mk>=0A58caac783f1d72028817b3f79ec306ec=0Aecho=20x=20-=20=
 logstash/pkg-descr=0Ased=20's/^X//'=20>logstash/pkg-descr=20<<=20=
 'e951d49595615b1bac2b63587f1fb181'=0AXlogstash=20is=20a=20tool=20for=20=
 managing=20events=20and=20logs.=20You=20can=20use=20it=20to=0AXcollect=20=
 logs,=20parse=20them,=20and=20store=20them=20for=20later=20use=20(like,=20=
 for=0AXsearching).=20Speaking=20of=20searching,=20logstash=20comes=20=
 with=20a=20web=20interface=0AXfor=20searching=20and=20drilling=20into=20=
 all=20of=20your=20logs.=0AX=0AXWWW:=09http://logstash.net/=0A=
 e951d49595615b1bac2b63587f1fb181=0Aecho=20x=20-=20logstash/pkg-plist=0A=
 sed=20's/^X//'=20>logstash/pkg-plist=20<<=20=
 'b88d9aee40fac03c7f8520b4cf627738'=0AX%%LOGSTASH_HOME%%/%%LOGSTASH_JAR%%=0A=
 X at exec=20mkdir=20-p=20%%LOGSTASH_RUN%%=0AX at exec=20mkdir=20-p=20=
 %%LOGSTASH_DATA_DIR%%=0AX at unexec=20if=20cmp=20-s=20=
 %D/%%ETCDIR%%/logstash.conf.sample=20%D/%%ETCDIR%%/logstash.conf;=20then=20=
 rm=20-f=20%D/%%ETCDIR%%/logstash.conf;=20fi=0A=
 X%%ETCDIR%%/logstash.conf.sample=0AX at exec=20if=20[=20!=20-f=20=20=
 %D/%%ETCDIR%%/logstash.conf=20]=20;=20then=20cp=20-p=20%D/%F=20=
 %B/logstash.conf;=20fi=0AX at unexec=20if=20cmp=20-s=20=
 %D/%%ETCDIR%%/elasticsearch.yml.sample=20=
 %D/%%ETCDIR%%/elasticsearch.yml;=20then=20rm=20-f=20=
 %D/%%ETCDIR%%/elasticsearch.yml;=20fi=0A=
 X%%ETCDIR%%/elasticsearch.yml.sample=0AX at exec=20if=20[=20!=20-f=20=20=
 %D/%%ETCDIR%%/elasticsearch.yml=20]=20;=20then=20cp=20-p=20%D/%F=20=
 %B/elasticsearch.yml;=20fi=0AX at dirrmtry=20%%LOGSTASH_DATA_DIR%%=0A=
 X at dirrmtry=20%%LOGSTASH_HOME%%=0AX at dirrmtry=20%%ETCDIR%%=0AX at dirrmtry=20=
 %%LOGSTASH_RUN%%=0Ab88d9aee40fac03c7f8520b4cf627738=0Aecho=20c=20-=20=
 logstash/files=0Amkdir=20-p=20logstash/files=20>=20/dev/null=202>&1=0A=
 echo=20x=20-=20logstash/files/logstash.conf.sample=0Ased=20's/^X//'=20=
 >logstash/files/logstash.conf.sample=20<<=20=
 '8c0433569bd185de29414aeb59f76651'=0AXinput=20{=0AX=20=20file=20{=0AX=20=20=
 =20=20type=20=3D>=20"system=20logs"=0AX=0AX=20=20#=20=20#=20Wildcards=20=
 work,=20here=20:)=0AX=20=20#=20=20path=20=3D>=20[=20"/var/log/*.log",=20=
 "/var/log/messages",=20"/var/log/syslog"=20]=0AX=20=20=20=20path=20=3D>=20=
 [=20"/var/log/messages"=20]=0AX=20=20}=0AX=0AX=20=20#file=20{=0AX=20=20#=20=
 =20type=20=3D>=20"Hudson-access"=0AX=20=20#=20=20path=20=3D>=20=
 "/var/log/www/hudson.ish.com.au-access_log"=0AX=20=20#}=0AX=0AX=20=20=
 #file=20{=0AX=20=20#=20=20=20=20=20=20=20=20=20=20type=20=3D>=20"Syslog"=0A=
 X=20=20#=20=20path=20=3D>=20"/var/log/messages"=0AX=20=20#}=0AX}=0AX=0A=
 Xoutput=20{=0AX=20=20#=20Emit=20events=20to=20stdout=20for=20easy=20=
 debugging=20of=20what=20is=20going=20through=0AX=20=20#=20logstash.=0AX=20=
 =20#stdout=20{=20}=0AX=0AX=20=20#=20This=20will=20use=20elasticsearch=20=
 to=20store=20your=20logs.=0AX=20=20#=20The=20'embedded'=20option=20will=20=
 cause=20logstash=20to=20run=20the=20elasticsearch=0AX=20=20#=20server=20=
 in=20the=20same=20process,=20so=20you=20don't=20have=20to=20worry=20=
 about=0AX=20=20#=20how=20to=20download,=20configure,=20or=20run=20=
 elasticsearch!=0AX=20=20elasticsearch=20{=20=0AX=20=20=20=20=20embedded=20=
 =3D>=20true=0AX=20=20=20=20=20#embedded_http_port=20=3D>=209200=0AX=20=20=
 =20=20=20#cluster=20=3D>=20elasticsearch=0AX=20=20=20=20=20#host=20=3D>=20=
 host=0AX=20=20=20=20=20#port=20=3D>=20port=0AX=20=20=20=20=20=20=0AX=20=20=
 }=0AX}=0A8c0433569bd185de29414aeb59f76651=0Aecho=20x=20-=20=
 logstash/files/elasticsearch.yml.sample=0Ased=20's/^X//'=20=
 >logstash/files/elasticsearch.yml.sample=20<<=20=
 '598eb73269d83d65a71b10e972503bc9'=0AX#####################=20=
 ElasticSearch=20Configuration=20Example=20#####################=0AX=0AX#=20=
 This=20file=20contains=20an=20overview=20of=20various=20configuration=20=
 settings,=0AX#=20targeted=20at=20operations=20staff.=20Application=20=
 developers=20should=0AX#=20consult=20the=20guide=20at=20=
 <http://elasticsearch.org/guide>.=0AX#=0AX#=20The=20installation=20=
 procedure=20is=20covered=20at=0AX#=20=
 <http://elasticsearch.org/guide/reference/setup/installation.html>.=0AX#=0A=
 X#=20ElasticSearch=20comes=20with=20reasonable=20defaults=20for=20most=20=
 settings,=0AX#=20so=20you=20can=20try=20it=20out=20without=20bothering=20=
 with=20configuration.=0AX#=0AX#=20Most=20of=20the=20time,=20these=20=
 defaults=20are=20just=20fine=20for=20running=20a=20production=0AX#=20=
 cluster.=20If=20you're=20fine-tuning=20your=20cluster,=20or=20wondering=20=
 about=20the=0AX#=20effect=20of=20certain=20configuration=20option,=20=
 please=20_do=20ask_=20on=20the=0AX#=20mailing=20list=20or=20IRC=20=
 channel=20[http://elasticsearch.org/community].=0AX=0AX#=20Any=20element=20=
 in=20the=20configuration=20can=20be=20replaced=20with=20environment=20=
 variables=0AX#=20by=20placing=20them=20in=20${...}=20notation.=20For=20=
 example:=0AX#=0AX#=20node.rack:=20${RACK_ENV_VAR}=0AX=0AX#=20See=20=
 <http://elasticsearch.org/guide/reference/setup/configuration.html>=0AX#=20=
 for=20information=20on=20supported=20formats=20and=20syntax=20for=20the=20=
 configuration=20file.=0AX=0AX=0AX###################################=20=
 Cluster=20###################################=0AX=0AX#=20Cluster=20name=20=
 identifies=20your=20cluster=20for=20auto-discovery.=20If=20you're=20=
 running=0AX#=20multiple=20clusters=20on=20the=20same=20network,=20make=20=
 sure=20you're=20using=20unique=20names.=0AX#=0AX#=20cluster.name:=20=
 elasticsearch=0AX=0AX=0AX####################################=20Node=20=
 #####################################=0AX=0AX#=20Node=20names=20are=20=
 generated=20dynamically=20on=20startup,=20so=20you're=20relieved=0AX#=20=
 from=20configuring=20them=20manually.=20You=20can=20tie=20this=20node=20=
 to=20a=20specific=20name:=0AX#=0AX#=20node.name:=20"Franz=20Kafka"=0AX=0A=
 X#=20Every=20node=20can=20be=20configured=20to=20allow=20or=20deny=20=
 being=20eligible=20as=20the=20master,=0AX#=20and=20to=20allow=20or=20=
 deny=20to=20store=20the=20data.=0AX#=0AX#=20Allow=20this=20node=20to=20=
 be=20eligible=20as=20a=20master=20node=20(enabled=20by=20default):=0AX#=0A=
 X#=20node.master:=20true=0AX#=0AX#=20Allow=20this=20node=20to=20store=20=
 data=20(enabled=20by=20default):=0AX#=0AX#=20node.data:=20true=0AX=0AX#=20=
 You=20can=20exploit=20these=20settings=20to=20design=20advanced=20=
 cluster=20topologies.=0AX#=0AX#=201.=20You=20want=20this=20node=20to=20=
 never=20become=20a=20master=20node,=20only=20to=20hold=20data.=0AX#=20=20=
 =20=20This=20will=20be=20the=20"workhorse"=20of=20your=20cluster.=0AX#=0A=
 X#=20node.master:=20false=0AX#=20node.data:=20true=0AX#=0AX#=202.=20You=20=
 want=20this=20node=20to=20only=20serve=20as=20a=20master:=20to=20not=20=
 store=20any=20data=20and=0AX#=20=20=20=20to=20have=20free=20resources.=20=
 This=20will=20be=20the=20"coordinator"=20of=20your=20cluster.=0AX#=0AX#=20=
 node.master:=20true=0AX#=20node.data:=20false=0AX#=0AX#=203.=20You=20=
 want=20this=20node=20to=20be=20neither=20master=20nor=20data=20node,=20=
 but=0AX#=20=20=20=20to=20act=20as=20a=20"search=20load=20balancer"=20=
 (fetching=20data=20from=20nodes,=0AX#=20=20=20=20aggregating=20results,=20=
 etc.)=0AX#=0AX#=20node.master:=20false=0AX#=20node.data:=20false=0AX=0A=
 X#=20Use=20the=20Cluster=20Health=20API=20=
 [http://localhost:9200/_cluster/health],=20the=0AX#=20Node=20Info=20API=20=
 [http://localhost:9200/_cluster/nodes]=20or=20GUI=20tools=0AX#=20such=20=
 as=20<http://github.com/lukas-vlcek/bigdesk>=20and=0AX#=20=
 <http://mobz.github.com/elasticsearch-head>=20to=20inspect=20the=20=
 cluster=20state.=0AX=0AX#=20A=20node=20can=20have=20generic=20attributes=20=
 associated=20with=20it,=20which=20can=20later=20be=20used=0AX#=20for=20=
 customized=20shard=20allocation=20filtering,=20or=20allocation=20=
 awareness.=20An=20attribute=0AX#=20is=20a=20simple=20key=20value=20pair,=20=
 similar=20to=20node.key:=20value,=20here=20is=20an=20example:=0AX#=0AX#=20=
 node.rack:=20rack314=0AX=0AX=0AX####################################=20=
 Index=20####################################=0AX=0AX#=20You=20can=20set=20=
 a=20number=20of=20options=20(such=20as=20shard/replica=20options,=20=
 mapping=0AX#=20or=20analyzer=20definitions,=20translog=20settings,=20=
 ...)=20for=20indices=20globally,=0AX#=20in=20this=20file.=0AX#=0AX#=20=
 Note,=20that=20it=20makes=20more=20sense=20to=20configure=20index=20=
 settings=20specifically=20for=0AX#=20a=20certain=20index,=20either=20=
 when=20creating=20it=20or=20by=20using=20the=20index=20templates=20API.=0A=
 X#=0AX#=20See=20=
 <http://elasticsearch.org/guide/reference/index-modules/>=20and=0AX#=20=
 <http://elasticsearch.org/guide/reference/api/admin-indices-create-index.h=
 tml>=0AX#=20for=20more=20information.=0AX=0AX#=20Set=20the=20number=20of=20=
 shards=20(splits)=20of=20an=20index=20(5=20by=20default):=0AX#=0AX#=20=
 index.number_of_shards:=205=0AX=0AX#=20Set=20the=20number=20of=20=
 replicas=20(additional=20copies)=20of=20an=20index=20(1=20by=20default):=0A=
 X#=0AX#=20index.number_of_replicas:=201=0AX=0AX#=20Note,=20that=20for=20=
 development=20on=20a=20local=20machine,=20with=20small=20indices,=20it=20=
 usually=0AX#=20makes=20sense=20to=20"disable"=20the=20distributed=20=
 features:=0AX#=0AX#=20index.number_of_shards:=201=0AX#=20=
 index.number_of_replicas:=200=0AX=0AX#=20These=20settings=20directly=20=
 affect=20the=20performance=20of=20index=20and=20search=20operations=0AX#=20=
 in=20your=20cluster.=20Assuming=20you=20have=20enough=20machines=20to=20=
 hold=20shards=20and=0AX#=20replicas,=20the=20rule=20of=20thumb=20is:=0A=
 X#=0AX#=201.=20Having=20more=20*shards*=20enhances=20the=20_indexing_=20=
 performance=20and=20allows=20to=0AX#=20=20=20=20_distribute_=20a=20big=20=
 index=20across=20machines.=0AX#=202.=20Having=20more=20*replicas*=20=
 enhances=20the=20_search_=20performance=20and=20improves=20the=0AX#=20=20=
 =20=20cluster=20_availability_.=0AX#=0AX#=20The=20"number_of_shards"=20=
 is=20a=20one-time=20setting=20for=20an=20index.=0AX#=0AX#=20The=20=
 "number_of_replicas"=20can=20be=20increased=20or=20decreased=20anytime,=0A=
 X#=20by=20using=20the=20Index=20Update=20Settings=20API.=0AX#=0AX#=20=
 ElasticSearch=20takes=20care=20about=20load=20balancing,=20relocating,=20=
 gathering=20the=0AX#=20results=20from=20nodes,=20etc.=20Experiment=20=
 with=20different=20settings=20to=20fine-tune=0AX#=20your=20setup.=0AX=0A=
 X#=20Use=20the=20Index=20Status=20API=20=
 (<http://localhost:9200/A/_status>)=20to=20inspect=0AX#=20the=20index=20=
 status.=0AX=0AX=0AX####################################=20Paths=20=
 ####################################=0AX=0AX#=20Path=20to=20directory=20=
 containing=20configuration=20(this=20file=20and=20logging.yml):=0AX#=0A=
 X#=20path.conf:=20/path/to/conf=0AX=0AX#=20Path=20to=20directory=20where=20=
 to=20store=20index=20data=20allocated=20for=20this=20node.=0AX#=0AX#=20=
 path.data:=20/path/to/data=0AX#=0AX#=20Can=20optionally=20include=20more=20=
 than=20one=20location,=20causing=20data=20to=20be=20striped=20across=0A=
 X#=20the=20locations=20(=C3=83=C2=83=C3=82=C2=A0=20la=20RAID=200)=20on=20=
 a=20file=20level,=20favouring=20locations=20with=20most=20free=0AX#=20=
 space=20on=20creation.=20For=20example:=0AX#=0AX#=20path.data:=20=
 /path/to/data1,/path/to/data2=0AX=0AX#=20Path=20to=20temporary=20files:=0A=
 X#=0AX#=20path.work:=20/path/to/work=0AX=0AX#=20Path=20to=20log=20files:=0A=
 X#=0AX#=20path.logs:=20/path/to/logs=0AX=0AX#=20Path=20to=20where=20=
 plugins=20are=20installed:=0AX#=0AX#=20path.plugins:=20/path/to/plugins=0A=
 X=0AX=0AX###################################=20Memory=20=
 ####################################=0AX=0AX#=20ElasticSearch=20performs=20=
 poorly=20when=20JVM=20starts=20swapping:=20you=20should=20ensure=20that=0A=
 X#=20it=20_never_=20swaps.=0AX#=0AX#=20Set=20this=20property=20to=20true=20=
 to=20lock=20the=20memory:=0AX#=0AX#=20bootstrap.mlockall:=20true=0AX=0A=
 X#=20Make=20sure=20that=20the=20ES_MIN_MEM=20and=20ES_MAX_MEM=20=
 environment=20variables=20are=20set=0AX#=20to=20the=20same=20value,=20=
 and=20that=20the=20machine=20has=20enough=20memory=20to=20allocate=0AX#=20=
 for=20ElasticSearch,=20leaving=20enough=20memory=20for=20the=20operating=20=
 system=20itself.=0AX#=0AX#=20You=20should=20also=20make=20sure=20that=20=
 the=20ElasticSearch=20process=20is=20allowed=20to=20lock=0AX#=20the=20=
 memory,=20eg.=20by=20using=20`ulimit=20-l=20unlimited`.=0AX=0AX=0A=
 X##############################=20Network=20And=20HTTP=20=
 ###############################=0AX=0AX#=20ElasticSearch,=20by=20=
 default,=20binds=20itself=20to=20the=200.0.0.0=20address,=20and=20=
 listens=0AX#=20on=20port=20[9200-9300]=20for=20HTTP=20traffic=20and=20on=20=
 port=20[9300-9400]=20for=20node-to-node=0AX#=20communication.=20(the=20=
 range=20means=20that=20if=20the=20port=20is=20busy,=20it=20will=20=
 automatically=0AX#=20try=20the=20next=20port).=0AX=0AX#=20Set=20the=20=
 bind=20address=20specifically=20(IPv4=20or=20IPv6):=0AX#=0AX#=20=
 network.bind_host:=20192.168.0.1=0AX=0AX#=20Set=20the=20address=20other=20=
 nodes=20will=20use=20to=20communicate=20with=20this=20node.=20If=20not=0A=
 X#=20set,=20it=20is=20automatically=20derived.=20It=20must=20point=20to=20=
 an=20actual=20IP=20address.=0AX#=0AX#=20network.publish_host:=20=
 192.168.0.1=0AX=0AX#=20Set=20both=20'bind_host'=20and=20'publish_host':=0A=
 X#=0AX#=20network.host:=20192.168.0.1=0AX=0AX#=20Set=20a=20custom=20port=20=
 for=20the=20node=20to=20node=20communication=20(9300=20by=20default):=0A=
 X#=0AX#=20transport.port:=209300=0AX=0AX#=20Enable=20compression=20for=20=
 all=20communication=20between=20nodes=20(disabled=20by=20default):=0AX#=0A=
 X#=20transport.tcp.compress:=20true=0AX=0AX#=20Set=20a=20custom=20port=20=
 to=20listen=20for=20HTTP=20traffic:=0AX#=0AX#=20http.port:=209200=0AX=0A=
 X#=20Set=20a=20custom=20allowed=20content=20length:=0AX#=0AX#=20=
 http.max_content_length:=20100mb=0AX=0AX#=20Disable=20HTTP=20completely:=0A=
 X#=0AX#=20http.enabled:=20false=0AX=0AX=0A=
 X###################################=20Gateway=20=
 ###################################=0AX=0AX#=20The=20gateway=20allows=20=
 for=20persisting=20the=20cluster=20state=20between=20full=20cluster=0AX#=20=
 restarts.=20Every=20change=20to=20the=20state=20(such=20as=20adding=20an=20=
 index)=20will=20be=20stored=0AX#=20in=20the=20gateway,=20and=20when=20=
 the=20cluster=20starts=20up=20for=20the=20first=20time,=0AX#=20it=20will=20=
 read=20its=20state=20from=20the=20gateway.=0AX=0AX#=20There=20are=20=
 several=20types=20of=20gateway=20implementations.=20For=20more=20=
 information,=0AX#=20see=20=
 <http://elasticsearch.org/guide/reference/modules/gateway>.=0AX=0AX#=20=
 The=20default=20gateway=20type=20is=20the=20"local"=20gateway=20=
 (recommended):=0AX#=0AX#=20gateway.type:=20local=0AX=0AX#=20Settings=20=
 below=20control=20how=20and=20when=20to=20start=20the=20initial=20=
 recovery=20process=20on=0AX#=20a=20full=20cluster=20restart=20(to=20=
 reuse=20as=20much=20local=20data=20as=20possible).=0AX=0AX#=20Allow=20=
 recovery=20process=20after=20N=20nodes=20in=20a=20cluster=20are=20up:=0A=
 X#=0AX#=20gateway.recover_after_nodes:=201=0AX=0AX#=20Set=20the=20=
 timeout=20to=20initiate=20the=20recovery=20process,=20once=20the=20N=20=
 nodes=0AX#=20from=20previous=20setting=20are=20up=20(accepts=20time=20=
 value):=0AX#=0AX#=20gateway.recover_after_time:=205m=0AX=0AX#=20Set=20=
 how=20many=20nodes=20are=20expected=20in=20this=20cluster.=20Once=20=
 these=20N=20nodes=0AX#=20are=20up,=20begin=20recovery=20process=20=
 immediately:=0AX#=0AX#=20gateway.expected_nodes:=202=0AX=0AX=0A=
 X#############################=20Recovery=20Throttling=20=
 #############################=0AX=0AX#=20These=20settings=20allow=20to=20=
 control=20the=20process=20of=20shards=20allocation=20between=0AX#=20=
 nodes=20during=20initial=20recovery,=20replica=20allocation,=20=
 rebalancing,=0AX#=20or=20when=20adding=20and=20removing=20nodes.=0AX=0A=
 X#=20Set=20the=20number=20of=20concurrent=20recoveries=20happening=20on=20=
 a=20node:=0AX#=0AX#=201.=20During=20the=20initial=20recovery=0AX#=0AX#=20=
 cluster.routing.allocation.node_initial_primaries_recoveries:=204=0AX#=0A=
 X#=202.=20During=20adding/removing=20nodes,=20rebalancing,=20etc=0AX#=0A=
 X#=20cluster.routing.allocation.node_concurrent_recoveries:=202=0AX=0AX#=20=
 Set=20to=20throttle=20throughput=20when=20recovering=20(eg.=20100mb,=20=
 by=20default=20unlimited):=0AX#=0AX#=20=
 indices.recovery.max_size_per_sec:=200=0AX=0AX#=20Set=20to=20limit=20the=20=
 number=20of=20open=20concurrent=20streams=20when=0AX#=20recovering=20a=20=
 shard=20from=20a=20peer:=0AX#=0AX#=20=
 indices.recovery.concurrent_streams:=205=0AX=0AX=0A=
 X##################################=20Discovery=20=
 ##################################=0AX=0AX#=20Discovery=20infrastructure=20=
 ensures=20nodes=20can=20be=20found=20within=20a=20cluster=0AX#=20and=20=
 master=20node=20is=20elected.=20Multicast=20discovery=20is=20the=20=
 default.=0AX=0AX#=20Set=20to=20ensure=20a=20node=20sees=20N=20other=20=
 master=20eligible=20nodes=20to=20be=20considered=0AX#=20operational=20=
 within=20the=20cluster.=20Set=20this=20option=20to=20a=20higher=20value=20=
 (2-4)=0AX#=20for=20large=20clusters:=0AX#=0AX#=20=
 discovery.zen.minimum_master_nodes:=201=0AX=0AX#=20Set=20the=20time=20to=20=
 wait=20for=20ping=20responses=20from=20other=20nodes=20when=20=
 discovering.=0AX#=20Set=20this=20option=20to=20a=20higher=20value=20on=20=
 a=20slow=20or=20congested=20network=0AX#=20to=20minimize=20discovery=20=
 failures:=0AX#=0AX#=20discovery.zen.ping.timeout:=203s=0AX=0AX#=20See=20=
 <http://elasticsearch.org/guide/reference/modules/discovery/zen.html>=0A=
 X#=20for=20more=20information.=0AX=0AX#=20Unicast=20discovery=20allows=20=
 to=20explicitly=20control=20which=20nodes=20will=20be=20used=0AX#=20to=20=
 discover=20the=20cluster.=20It=20can=20be=20used=20when=20multicast=20is=20=
 not=20present,=0AX#=20or=20to=20restrict=20the=20cluster=20=
 communication-wise.=0AX#=0AX#=201.=20Disable=20multicast=20discovery=20=
 (enabled=20by=20default):=0AX#=0AX#=20=
 discovery.zen.ping.multicast.enabled:=20false=0AX#=0AX#=202.=20Configure=20=
 an=20initial=20list=20of=20master=20nodes=20in=20the=20cluster=0AX#=20=20=
 =20=20to=20perform=20discovery=20when=20new=20nodes=20(master=20or=20=
 data)=20are=20started:=0AX#=0AX#=20discovery.zen.ping.unicast.hosts:=20=
 ["host1",=20"host2:port",=20"host3[portX-portY]"]=0AX=0AX#=20EC2=20=
 discovery=20allows=20to=20use=20AWS=20EC2=20API=20in=20order=20to=20=
 perform=20discovery.=0AX#=0AX#=20You=20have=20to=20install=20the=20=
 cloud-aws=20plugin=20for=20enabling=20the=20EC2=20discovery.=0AX#=0AX#=20=
 See=20=
 <http://elasticsearch.org/guide/reference/modules/discovery/ec2.html>=0A=
 X#=20for=20more=20information.=0AX#=0AX#=20See=20=
 <http://elasticsearch.org/tutorials/2011/08/22/elasticsearch-on-ec2.html>=0A=
 X#=20for=20a=20step-by-step=20tutorial.=0AX=0AX=0A=
 X##################################=20Slow=20Log=20=
 ##################################=0AX=0AX#=20Shard=20level=20query=20=
 and=20fetch=20threshold=20logging.=0AX=0AX#index.search.slowlog.level:=20=
 TRACE=0AX#index.search.slowlog.threshold.query.warn:=2010s=0A=
 X#index.search.slowlog.threshold.query.info:=205s=0A=
 X#index.search.slowlog.threshold.query.debug:=202s=0A=
 X#index.search.slowlog.threshold.query.trace:=20500ms=0AX=0A=
 X#index.search.slowlog.threshold.fetch.warn:=201s=0A=
 X#index.search.slowlog.threshold.fetch.info:=20800ms=0A=
 X#index.search.slowlog.threshold.fetch.debug:=20500ms=0A=
 X#index.search.slowlog.threshold.fetch.trace:=20200ms=0A=
 598eb73269d83d65a71b10e972503bc9=0Aecho=20x=20-=20=
 logstash/files/logstash.in=0Ased=20's/^X//'=20=
 >logstash/files/logstash.in=20<<=20'0f1ca7b587c13466a7f3a6fad7064657'=0A=
 X#!/bin/sh=0AX=0AX#=20$FreeBSD:=0AX#=20PROVIDE:=20logstash=0AX#=20=
 REQUIRE:=20LOGIN=0AX#=20KEYWORD:=20shutdown=0AX=0AX#=0AX#=20=
 Configuration=20settings=20for=20logstash=20in=20/etc/rc.conf:=0AX#=0AX#=20=
 logstash_enable=20(bool):=0AX#=20=20=20Set=20to=20"NO"=20by=20default.=0A=
 X#=20=20=20Set=20it=20to=20"YES"=20to=20enable=20logstash=0AX#=0AX#=20=
 logstash_mode=20:=0AX#=20=20=20Set=20to=20"standalone"=20by=20default.=0A=
 X#=20=20=20Valid=20options:=0AX#=20=20=20=20=20"standalone":=20agent,=20=
 web=20&=20elasticsearch=0AX#=20=20=20=20=20"web":=20Starts=20logstash=20=
 as=20a=20web=20ui=0AX#=20=20=20=20=20"agent":=20Justs=20works=20as=20a=20=
 log=20shipper=20=0AX#=0AX#=20logstash_logging=20(bool):=0AX#=20=20=20Set=20=
 to=20"NO"=20by=20default.=0AX#=20=20=20Set=20it=20to=20"YES"=20to=20=
 enable=20logstash=20logging=20to=20file=0AX#=20=20=20Default=20output=20=
 to=20/var/log/logstash.log=0AX#=0AX=0AX.=20/etc/rc.subr=0AX=0A=
 Xname=3D"logstash"=0AXrcvar=3Dlogstash_enable=0AX=0A=
 Xpiddir=3D"/var/run/${name}"=0AXpidfile=3D"${piddir}/${name}.pid"=0AX=0A=
 Xif=20[=20-d=20$piddir=20];=20then=0AX=09mkdir=20-p=20$piddir=0AXfi=0AX=0A=
 Xlogdir=3D"/var/log"=0AXcommand=3D"/usr/sbin/daemon"=0AX=0A=
 Xload_rc_config=20"${name}"=0AX=0AX:=20${logstash_enable=3D"NO"}=0AX:=20=
 ${logstash_home=3D"%%LOGSTASH_HOME%%"}=0AX:=20=
 ${logstash_config=3D"%%PREFIX%%/etc/${name}/${name}.conf"}=0AX:=20=
 ${logstash_jar=3D"%%LOGSTASH_HOME%%/%%LOGSTASH_JAR%%"}=0AX:=20=
 ${logstash_java_home=3D"%%JAVA_HOME%%"}=0AX:=20${logstash_log=3D"NO"}=0A=
 X:=20${logstash_mode=3D"standalone"}=0AX:=20${logstash_port=3D"9292"}=0A=
 X:=20${logstash_elastic_backend=3D""}=0AX:=20=
 ${logstash_log_file=3D"${logdir}/${name}.log"}=0AX:=20=
 ${logstash_elastic_datadir=3D"%%LOGSTASH_DATA_DIR%%"}=0AX=0A=
 Xjava_cmd=3D"${logstash_java_home}/bin/java"=0AXprocname=3D"${java_cmd}"=0A=
 X=0AXlogstash_chdir=3D${logstash_home}=0AXlogstash_log_options=3D""=0A=
 Xlogstash_elastic_options=3D""=0AX=0AXif=20[=20${logstash_log}=20=3D=3D=20=
 "YES"=20];=20then=0AX=09logstash_log_options=3D"=20--log=20=
 ${logstash_log_file}"=20=0AXfi=0AX=0AXif=20[=20${logstash_mode}=20=3D=3D=20=
 "standalone"=20];=20then=0AX=09logstash_args=3D"agent=20-f=20=
 ${logstash_config}=20--=20web=20--port=20${logstash_port}=20--backend=20=
 elasticsearch:///?local=20${logstash_log_options}"=0AX=09=
 logstash_elastic_options=3D"=20=
 -Des.path.data=3D${logstash_elastic_datadir}"=0AXelif=20[=20=
 ${logstash_mode}=20=3D=3D=20"agent"=20];then=0AX=09logstash_args=3D"agent=20=
 -f=20${logstash_config}=20${logstash_log_options}"=0AXelif=20[=20=
 ${logstash_mode}=20=3D=3D=20"web"=20];then=0AX=09logstash_args=3D"web=20=
 --port=20${logstash_port}=20--backend=20=
 elasticsearch://${logstash_elastic_backend}/=20${logstash_log_options}"=0A=
 Xfi=0AX=0AXcommand_args=3D"-f=20-p=20${pidfile}=20${java_cmd}=20=
 ${logstash_elastic_options}=20-jar=20${logstash_jar}=20${logstash_args}"=0A=
 Xrequired_files=3D"${java_cmd}=20${logstash_config}"=0AX=0A=
 Xrun_rc_command=20"$1"=0A0f1ca7b587c13466a7f3a6fad7064657=0Aexit=0A=0A=

 --Apple-Mail=_5DBA56F5-6601-44C8-A39F-C15CB61FE666
 Content-Transfer-Encoding: 7bit
 Content-Type: text/plain;
 	charset=us-ascii

 --Apple-Mail=_5DBA56F5-6601-44C8-A39F-C15CB61FE666--