> ## Documentation Index
> Fetch the complete documentation index at: https://gcore.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Install and configure Logstash

Logstash is an open-source data collection and processing tool. It's used to collect, parse, enrich, and transform log data from various sources, including log files, event streams, and databases.

## Install Logstash

Download Logstash from the [official Elastic website](https://www.elastic.co/logstash) and install it per the instructions.

## Configure Logstash

A standard Logstash configuration consists of three sections: `input`, `filter`, and `output`. The `input` and `filter` sections depend on the sources of logs.

To send logs to Gcore Managed Logging, configure Logstash with Kafka output and enable the [Kafka Integration Plugin](https://github.com/logstash-plugins/logstash-integration-kafka) in your Logstash installation.

1\. Configure Logstash with Kafka output by adding the following data to the `logstash.conf` file:

```
output {
        kafka {
          codec => json
          topic_id => "yourlogin.yourtopic"
          bootstrap_servers => "endpoint"
          sasl_mechanism => "SCRAM-SHA-512"
          security_protocol => "SASL_SSL"
          sasl_jaas_config => "org.apache.kafka.common.security.scram.ScramLoginModule required username='yourlogin'password='yourpassword'; "
          key_serializer => "org.apache.kafka.common.serialization.StringSerializer"
          value_serializer => "org.apache.kafka.common.serialization.StringSerializer"
        }
    }
```

2\. Customize the highlighted values:

* **yourlogin.yourtopic**: Your username and topic name, separated with a dot (.)
* **endpoint**: Kafka endpoint
* **yourlogin.yourtopic**: Your login
* **yourpassword**: Your password

<Tip>
  **Tip**

  You can find your username, password, login, and topic name information in the Gcore Customer Portal on the **Logging** page. Learn more about logging configuration in [our dedicated guide](/cloud/logging-as-a-service/configure-logging-and-view-your-logs).
</Tip>

For more settings, check out the [Kafka output plugin](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-kafka.html) documentation.

<Accordion title="Descriptions of the 'output' parameters">
  * **topic\_id** : ID of the Kafka topic to which Logstash will publish messages
  * **bootstrap\_servers** : A comma-separated list of Kafka broker addresses
  * **sasl.mechanism** : Authentication mechanism that helps to verify a username and password entered to sign in your logs storage
  * **security\_protocol** : Security protocol used to encrypt your data and protect it from theft
  * **sasl\_jaas\_config** : JAAS configuration required for SASL authentication
  * **key\_serializer** : Serialization format used to convert keys of messages sent to Kafka
  * **value\_serializer** : Serialization method applied to the content of messages before they are transmitted to Kafka
</Accordion>

3\. Save the changes in the Logstash configuration file.

4\. Restart Logstash. Logstash will start sending logs to Gcore Managed Logging.