Skip to main content

Raymii.org Raymii.org Logo

Quis custodiet ipsos custodes?
Home | About | All pages | Cluster Status | RSS Feed

Munin plugin to show Logstash/Kibana messages per hour

Published: 12-04-2013 | Author: Remy van Elst | Text only version of this article


❗ This post is over eleven years old. It may no longer be up to date. Opinions may have changed.

Table of Contents


This is a simple munin plugin which shows you the amount of log messages your logstash/kibana server receives per hour. It should run on the Logstash host, it gets the data from out the Elasticsearch database.

Recently I removed all Google Ads from this site due to their invasive tracking, as well as Google Analytics. Please, if you found this content useful, consider a small donation using any of the options below. It means the world to me if you show your appreciation and you'll help pay the server costs:

GitHub Sponsorship

PCBWay referral link (You get $5, I get $20 after you've placed an order)

Digital Ocea referral link ($200 credit for 60 days. Spend $25 after your credit expires and I'll get $25!)

Munin plugin example

Setup instructions

You need CURL, so you might need to install that via your package manager.

Clone the git repository:

git clone git://github.com/RaymiiOrg/munin-plugins.git

Place the plugin file in /usr/share/munin/plugins/, make it executable and create a symlink in /etc/munin/plugins/

cd munin-plugins
cp logstash-messages-per-hour.sh /usr/share/munin/plugins
chmod +x /usr/share/munin/plugins/logstash-messages-per-hour.sh
ln -s /usr/share/munin/plugins/logstash-messages-per-hour.sh /etc/munin/plugins/logstash

Edit the plugin if your elasticsearch database URL is on another host:

# Edit the following line, and change localhost to what it should be
TOTAL_EVENTS=$(curl -s -k -XGET http://localhost:9200/logstash

Then wait until your munin server has updated, and enjoy.

Tags: elasticsearch , kibana , logging , logstash , monitoring , munin , plugin , rsyslog , software , syslog