Build Status

This plugin sends Logstash events to the Unomaly ingestion API (min version Unomaly 2.27).

Getting started

Installing through rubygems

logstash-plugin install logstash-output-unomaly

Minimal configuration

output {
    unomaly {
        host => "https://your-unomaly-instance:443"
    }
}

Important options

Option Description Default
host Unomaly instance address. Must define full path such as "https://my-instance:443" No default
message_key The key in the Logstash event that Unomaly should use for anomaly detection. "message"
source_key The event key defining the Unomaly system. "host"
ssl_certificate_validation Enable or disable SSL certificate validation "strict"
keep_timestamp If false, Unomaly will use the ingestion timestamp as the event timestamp true

See the source code for the full list of options

Known issues

  • Installation of the plugin fails on Logstash 6.2.1.

## Contributing

Bug reports and pull requests are welcome. This project is intended to be a safe, welcoming space for collaboration.

## Development

We use docker to build the plugin. You can build it by running docker-compose run jruby gem build logstash-output-unomaly.gemspec