​
Configure Logstash

Create a new configuration file or update your existing to include the following:

input {
  file {
    id => "file_input_id"
    path => <YOUR_LOG_PATH>
  }
}
filter {
  grok {
    match => { "message" => "<%{NONNEGINT:pri}>%{NONNEGINT:version} +(?:%{TIMESTAMP_ISO8601:log.timestamp}|-) +(?:%{HOSTNAME:hostname}|-) +(?:-|%{NOTSPACE:app.name}) +(?:-|%{NOTSPACE:procid}) (?:-|%{NOTSPACE:msgid}) +(?:[%{DATA:structured.data}]|-|) +%{GREEDYDATA:message}"}
  }
}
output {
  http {
    url => "https://ingestion.<REGION>.bronto.io"
    id => "my_plugin_id"
    headers => {
      "x-bronto-api-key" => <YOUR_API_KEY>
      "x-bronto-service-name" => <YOUR_SERVICE_NAME>
      "x-bronto-service-namespace" => <YOUR_SERVICE_NAMEMESPACE>
      "Content-Type" => "text/html"
    }
    http_method => "post"
  }
 file {
   path => "test.log"
 }
}

​
Verify log collection

Once you have applied your configuration and restarted Fluent Bit, you can expect to see your log data being ingested to Bronto and accessible via the Search page.