# Logstash Output Plugin

**URL:** <https://community.neo4j.com/t/logstash-output-plugin/6417>\
**Category:** Ecosystem & Integrations\
**Created:** [April 7, 2019, 6:18pm UTC](https://community.neo4j.com/t/logstash-output-plugin/6417 "2019-04-07T18:18:33Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![hank](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/hank/32/4197_2.png) [@hank](https://community.neo4j.com/u/hank)\
**Post date:** [April 7, 2019, 6:18pm UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/1 "2019-04-07T18:18:33Z")

</div>

On the page “Neo4j and Elastic Search” at the bottom there’s a section about Logstash plugins written by Pere Urbon. But the section is empty bullet points. A brief look at Github I didn’t find them. Has anyone thought about using Neo4j as the datastore for the Elastic Stack? Seems like if you have a good semantic model for all the things ES logs, you could get a lot of insights into a cloud application.

---

<div class="post-metadata">

**Author:** ![hank](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/hank/32/4197_2.png) [@hank](https://community.neo4j.com/u/hank)\
**Post date:** [April 7, 2019, 6:25pm UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/2 "2019-04-07T18:25:02Z")

</div>

Ok, here it is:

> **[GitHub - logstash-plugins/logstash-output-neo4j: A Logstash neo4j output](https://github.com/logstash-plugins/logstash-output-neo4j)**
>
> A Logstash neo4j output. Contribute to logstash-plugins/logstash-output-neo4j development by creating an account on GitHub.

---

<div class="post-metadata">

**Author:** ![hank](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/hank/32/4197_2.png) [@hank](https://community.neo4j.com/u/hank)\
**Post date:** [May 14, 2019, 9:23pm UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/3 "2019-05-14T21:23:46Z")

</div>

Well... I’m in JRuby configuration hell. The plugin uses a few different libraries than the latest packaged with Ubuntu 16.04. If anyone has a recommendation for that, let me know. Also, not sure if the plugin. This project seems to be really comprehensive (although it does not have logger integrations):  
[https://github.com/LendingClub/mercator](https://github.com/LendingClub/mercator)

---

<div class="post-metadata">

**Author:** ![michael.hunger](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/michael.hunger/32/27377_2.png) [@michael.hunger](https://community.neo4j.com/u/michael.hunger)\
**Post date:** [May 29, 2019, 5:23am UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/4 "2019-05-29T05:23:13Z")

</div>

Interesting idea, I guess so far no one has brought this up. Most work has been in the opposite direction,  
also more recent ones like this from @david_allen

> **[Neo4j Logging/Monitoring with Elastic Cloud and ELK Stack](https://medium.com/neo4j/neo4j-logging-monitoring-with-elastic-cloud-and-elk-stack-77a2565b3bf2)**
>
> Setting up logging and metrics

---

<div class="post-metadata">

**Author:** ![hank](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/hank/32/4197_2.png) [@hank](https://community.neo4j.com/u/hank)\
**Post date:** [May 29, 2019, 3:19pm UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/5 "2019-05-29T15:19:05Z")

</div>

When I found that article, I knew that I wasn't alone in the world ;)

Elastic seems to be a terrific solution -- I don't have experience using it in a production environment. But there are a lot of links, ultimately would like to be able to trace those back to commits and lines of source code, configurations, etc.

---

<div class="post-metadata">

**Author:** ![szenyo](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/szenyo/32/450_2.png) [@szenyo](https://community.neo4j.com/u/szenyo)\
**Post date:** [June 30, 2020, 8:31am UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/6 "2020-06-30T08:31:12Z")

</div>

hey, I have just found this topic. We have a logstash for hosting data ingestion pipelines. From kafka, files, jdbc to other databases, mainly SQL servers. I was looking for a new ingestion where I would like to load the Neo4j somehow, so I am looking something like this Neo4j output plugin.

@hank do you have any experience with the plugin so far? I am not sure it is maintained properly.

---

<div class="post-metadata">

**Author:** ![hank](https://sea1.discourse-cdn.com/flex021/user_avatar/community.neo4j.com/hank/32/4197_2.png) [@hank](https://community.neo4j.com/u/hank)\
**Post date:** [July 9, 2020, 2:18am UTC](https://community.neo4j.com/t/logstash-output-plugin/6417/7 "2020-07-09T02:18:53Z")

</div>

Hi Janos,

My brief look at the plugin, and that was a year ago, is that it is limited and it was using an old version of the API. So I lost interest...

That said, I think Logstash has such a wide array of collectors -- if you could push events, then go back and create other relationships. I recall the pattern for time series data is simply one node connected to the next. So I never thought it could, in real time, create the kind of relationships that squash down all the events into something meaningful.

It did not look too difficult to write a plugin for TS data, but it was out of scope if there were not supported tools.

Let me know if you take it up.

Best,  
Hank  
i/o werx
