Processing Events with Logstash (includes Filebeat) (

Process events with Logstash, which is a key part of the ELK stack (Elasticsearch, Logstash, Kibana) and Elastic Stack.

Created by: Bo Andersen

Produced in 2022

What you will learn

  • Understand the fundamental concepts of Logstash
  • Build pipelines that process and manipulates thousands of events
  • Send data to Logstash from numerous sources and to several destinations
  • Build a fully functional pipeline that handles Apache web server logs
  • Process Filebeat events with Logstash

Quality Score

Content Quality
Video Quality
Qualified Instructor
Course Pace
Course Depth & Coverage

Overall Score : 88 / 100

Live Chat with CourseDuck's Co-Founder for Help

Need help deciding on a elastic search course? Or looking for more detail on Bo Andersen's Processing Events with Logstash (includes Filebeat)? Feel free to chat below.
Join CourseDuck's Online Learning Discord Community

Course Description

NEW! This course now also includes Filebeat and how to integrate it with Logstash, Elasticsearch, and Kibana!
Want to learn how to process events with Logstash? Then you have come to the right place; this course is by far the most comprehensive course on Logstash here at Udemy! This course specifically covers Logstash, meaning than we can go into much more detail than if this course covered the entire Elastic Stack. So if you want to learn Logstash specifically, then this course is for you!
This course assumes no prior knowledge of or experience with Logstash. We start from the very basics and gradually transition into more advanced topics. The course is designed so that you can follow along the whole time step by step, and you can find all of the configuration files within a GitHub repository. The course covers topics such as handling Apache web server logs (both access and error logs), data enrichment, sending data to Elasticsearch, visualizing data with Kibana, along with covering a number of popular use cases that you are likely to come across. Upon completing this course, you will know all of the most important aspects of Logstash, and will be able to build complex pipeline configurations and process many different kinds of events and data.
What is Logstash?
In case you don't know what Logstash is all about, it is an event processing engine developed by the company behind Elasticsearch, Kibana, and more. Logstash is often used as a key part of the ELK stack or Elastic Stack, so it offers a strong synergy with these technologies. You can use Logstash for processing many different kinds of events, and an event can be many things. You can process access or error logs from a web server, or you can send events to Logstash from an e-commerce application, such as when an order was received or a payment was processed. You can ingest data from files (flat files, JSON, XML, CSV, etc.), receive data over HTTP or TCP, retrieve data from databases, and more. Logstash then enables you to process and manipulate the events before sending them to a destination of your choice, such as Elasticsearch, e-mail, or Slack.
Why do we need Logstash?
Because by sending events to Logstash, you decouple things. You effectively move event processing out of the web application and into Logstash, meaning that if you need to change how events are processed, you don't need to deploy a new version of a web application, for instance. The event processing and its configuration is centralized within Logstash instead of every place you trigger events. This means that all the web application needs to do, is to send an event to Logstash; it doesn't need to know anything about what happens to the event afterwards and where it ends up. This improves your architecture and lets Logstash do what it does best; process events.
Let's get started!
I hope that you are ready to begin learning Logstash. Have a look around the curriculum if you want to check out the course content in more details. I look forward to seeing you inside the course!Who this course is for:
  • Developers who want to learn Logstash

*Some courses are excluded from this sale. Coupon not working? If the link above doesn't drop prices, clear the cookies in your browser and then click this link here.
Also, you may need to apply the coupon code directly on the cart page to get the discount.

Coupon Code

Instructor Details

Bo Andersen

My name is Bo Andersen and I am a software engineer from Denmark.
I currently work as the lead developer and partner at a startup company, apart from teaching here at Udemy. I have previously worked at a very successful company, operating one of the largest websites in Denmark, before deciding to teach software engineering. I have worked with programming for a decade and have a bachelor's degree in computer science. I started out learning to code by building websites in PHP, but have since worked with many other technologies such as Elasticsearch, Logstash, Kibana, Beats, Java, Python, Docker, AWS, etc.
I have also been blogging about programming subjects for a number of years, so I encourage you to have a look at my website if you are curious.



47 total reviews

5 star 4 star 3 star 2 star 1 star
% Complete
% Complete
% Complete
% Complete
% Complete

Probably the most complete course on event processing with logstash and filebeat. Bo is an excellent teacher and covered a lot of ground and saved time that would have to be spent on reading documentations. This would lay an excellent ground work for more advanced use cases with the ELK stack.

The most comprehensive course for Logstash and filebeat!

The concepts behind Logstash and Filebeats were quite well explained, it was easy for me to understand. It could have been better if the screen could be zoomed in further during the coding portion, as the screen and font was quite small

The course is really great as an introduction to Logstash and Filebeats. The lessons in section 4 have summaries at the end. If that was introduced to previous sections, I'm sure learning would be much easier. Great job Bo!

It is good for a learner like me. lots of artifacts used in the lecture could be shared somehow so that the users can use the artifacts, try & observe what that is shown in the lecture..

Great intro to logstash and beats! Looking forward to any upcoming insights into other sources/sinks such as jdbc and ESB.

Very useful to get familiarity of all the stack..

The lessons are really good. The instructor keep the things simple and build the content gradually.To me, it is a excellent course to start with logstash.

Instructor has explained things very well till now.

Very good match. I'm working heavily in ELK stack now and Logstash is the key component to allowing me to tailor the data to what we are specifically looking for.

Bo is explaining well about log-stash basics.also teaching well about advance features in log stash.

Im not sure what the issue exactly was but the log files were not exactly correct for the HTTP Grok patterns and I had to spend plenty of time figuring out exactly where the break was and fixing it. That also meant that I had to change the patterns on the other scripts just to follow along. This was not a big deal but took some time to make the changes that could have been used completing the course. Other than that, this was easy to follow along, the supplement info was great and it helped me learn a great deal when it comes to Logstash. I look forward to learning more when future modules are added onto this and would love to see more content from this presenter with regards to Elastic.