# Installer logstash avec Homebrew, chocolatey, Nix, scoop

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de logstash pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:logstash
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install logstash
```

  Preuve: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#logstash
```

  Preuve: nixpkgs package indexes: logstash from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix

### Windows

- Chocolatey (92%):

```sh
choco install logstash
```

  Preuve: Chocolatey community package catalog: logstash from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','logexpert'

- Scoop (92%):

```sh
scoop install extras/logstash
```

  Preuve: Scoop official bucket manifest trees: bucket/logstash.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1

## Faits du paquet

- **Clé du paquet:** brew:logstash
- **Gestionnaire de paquets:** Homebrew
- **Page du gestionnaire de paquets:** <https://formulae.brew.sh/formula/logstash>
- **Version:** 9.5.0
- **Résumé source:** Tool for managing events and logs
- **Page d'accueil:** <https://www.elastic.co/products/logstash>
- **Dépôt:** <https://github.com/elastic/logstash>
- **Docs amont:** <https://www.elastic.co/products/logstash>
- **Licence:** Apache-2.0
- **Archive source:** <https://github.com/elastic/logstash/archive/refs/tags/v9.4.4.tar.gz>
- **Dernière mise à jour:** 2026-08-04T15:18:42Z
- **Généré:** 2026-08-04T22:13:35+00:00

## exécutables

- logstash (cli)
- logstash-plugin (cli)
- logstash (alias)
- logstash-plugin (alias)

## Dépendances

- openjdk@21

## Dépendances de compilation

- gradle@8

## Comportement d'installation

- hook post-installation: non défini
- Service: declared
- Précautions: Configuration files are located in $HOMEBREW_PREFIX/etc/logstash/
- Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Version et fraîcheur

- page générée: 2026-08-04
- version du gestionnaire: 9.5.0
- gestionnaire mis à jour: 2026-08-04
- données locales: OK
- dépôt amont: https://github.com/elastic/logstash
- dernière version détectée: v9.4.4 (à jour)
## Historique du projet et usages

Logstash is Elastic's open-source server-side data processing pipeline for ingesting, transforming, enriching, and routing events and logs. It is one of the classic components of the Elastic Stack and the older ELK stack.

### Historique du projet

The official repository describes Logstash as a tool to transport and process logs, events, and other data. Its GitHub repository was created in November 2010, and Elastic's current documentation frames it as a real-time data collection engine that can unify data from many sources and normalize it for downstream analytics and visualization.

Elastic documentation emphasizes Logstash's pipeline model: inputs receive events, filters parse or enrich them, and outputs send them onward. The project also developed a large plugin ecosystem; the upstream README notes more than 200 plugins and points plugin issues to separate repositories under the `logstash-plugins` organization.

### Historique d'adoption

Logstash became widely adopted because it paired naturally with Elasticsearch and Kibana for log search and visualization. Elastic's own product pages and stack documentation present Logstash as part of the Elastic Stack alongside Elasticsearch, Kibana, Beats, and newer Elastic Agent components.

A 2014 Elastic press release for Logstash 1.4 described it as one of the most popular open-source log-management tools and tied its growth to the ELK stack. In package-manager terms, the supplied facts show distribution through Homebrew, Chocolatey, Nix, and Scoop, while Elastic also publishes official downloadable binaries and Debian/RPM packages.

### Modes d'utilisation

Users write pipeline configuration files that describe inputs, filters, and outputs, commonly placing `.conf` files under `/etc/logstash/conf.d` on Debian and RPM installations. Settings such as `logstash.yml`, `pipelines.yml`, and JVM options live in the `path.settings` directory.

The official docs also document a Logstash keystore for secrets. Sensitive values such as Elasticsearch passwords can be stored in the keystore and referenced from `logstash.yml` or pipeline configuration as `${KEY}`.

### Pourquoi les passionnés de paquets s'y intéressent

Logstash matters to package nerds because it is a heavyweight but scriptable bridge between Unix log files and modern search/observability stacks. It brought plugin-managed, package-distributed ETL behavior into the everyday log pipeline, and its config-file layout is a frequent concern for distro, Docker, and Homebrew packaging.

### Chronologie

- 2010: Official GitHub repository created.
- 2014: Elastic announces Logstash 1.4 and promotes it as a major ELK-stack log-management component.
- 2015: Elastic blog describes Logstash Forwarder as started by Logstash creator Jordan Sissel and folded into Filebeat.
- 2026: Logstash 9.x tags are active in the official repository.

### Related projects

- Logstash is part of the Elastic Stack with Elasticsearch, Kibana, Beats, and Elastic Agent.
- Logstash plugins are maintained separately under the `logstash-plugins` GitHub organization and are published as Ruby gems.

### Sources

- <https://api.github.com/repos/elastic/logstash>
- <https://github.com/elastic/logstash#readme>
- <https://www.elastic.co/about/press/elasticsearch-releases-logstash-1-4-makes-log-analysis-faster-simpler>
- <https://www.elastic.co/docs/get-started/the-stack>
- <https://www.elastic.co/docs/reference/logstash>
- <https://www.elastic.co/logstash>
- source_facts.package-manager


## Notes de sécurité

formula declares a Homebrew service.

- **Risque Geiger:** orange / moyen
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: {extract.path}/config/logstash.yml, /etc/logstash/logstash.yml, /etc/logstash/pipelines.yml, /etc/logstash/conf.d/*.conf

## Credential files

- Linux: /etc/logstash/logstash.keystore
- Unix: {path.settings}/logstash.keystore
## Détails de la base source

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** logstash
- **Version Scheme:** 1
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Autres enregistrements de gestionnaires de paquets

- Nix - logstash: normalized package name match | nixpkgs package indexes: logstash from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
- Chocolatey - logstash: normalized package name match | Chocolatey community package catalog: logstash from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','logexpert'
- Scoop - extras/logstash: normalized package name match | Scoop official bucket manifest trees: bucket/logstash.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1


## Liens liés

- [Secret-risk packages](https://pkg.so/fr/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://pkg.so/fr/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [openjdk@21](https://pkg.so/fr/brew/openjdk-21/) - Runtime dependency declared by Homebrew.
- [influxdb](https://pkg.so/fr/brew/influxdb/) - Shares pkgdb curated category or tags: cli, data, events.
- [pgloader](https://pkg.so/fr/brew/pgloader/) - Shares pkgdb curated category or tags: cli, data, etl.
- [fluent-bit](https://pkg.so/fr/brew/fluent-bit/) - Shares pkgdb curated category or tags: cli, data, logs.
- [filebeat](https://pkg.so/fr/brew/filebeat/) - Shares pkgdb curated category or tags: cli, data, logs.
- [loki](https://pkg.so/fr/brew/loki/) - Shares pkgdb curated category or tags: cli, data, logs.
- [osm2pgsql](https://pkg.so/fr/brew/osm2pgsql/) - Shares pkgdb curated category or tags: cli, data, etl.
- [nifi](https://pkg.so/fr/brew/nifi/) - Shares pkgdb curated category or tags: cli, data, etl.
- [influxdb@1](https://pkg.so/fr/brew/influxdb-1/) - Shares pkgdb curated category or tags: cli, data, events.
- [logfmt](https://pkg.so/fr/npm/logfmt/) - Local package facts share a topical domain. Shared terms: cli, data, log, log-processing, logs.
- [apache-flink](https://pkg.so/fr/brew/apache-flink/) - Local package facts share a topical domain. Shared terms: cli, data, openjdk, openjdk-21, processing.

## Combined YAML source

View the package source record on GitHub. [combined/logstash.yml](https://github.com/mxcl/pkgdb/blob/main/combined/logstash.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
