Struct LogstashExporter 

pub struct LogstashExporter { /* private fields */ }

Logstash audit exporter.

Sends audit events to a Logstash server via TCP using JSON Lines protocol. The exporter automatically handles connection failures and reconnects as needed.

Security

By default, connections are unencrypted. Use with_tls(true) to enable TLS encryption for production environments.

Batch Size Considerations

When using export_batch(), be aware that the entire batch is buffered in memory before transmission. Large batches can consume significant memory. Consider the following guidelines:

• For typical audit events (~1KB each), batches of 100-1000 events are reasonable
• Monitor memory usage if processing larger events or higher batch sizes
• Adjust batch sizes based on your memory constraints and network latency requirements

Implementations

impl LogstashExporter

pub fn new(host: &str, port: u16) -> Result<Self>

Create a new Logstash exporter.

WARNING: By default, connections are unencrypted. For production use, call with_tls(true) to enable TLS encryption.

Arguments

• host - Logstash server hostname or IP address
• port - Logstash server port

Errors

Returns an error if the host is invalid (empty, or not a valid hostname/IP).

pub fn with_tls(self, enable: bool) -> Self

Enable or disable TLS encryption for the connection.

When TLS is enabled, the exporter will use the system’s root certificates to validate the server’s certificate.

Arguments

• enable - Whether to enable TLS encryption

Example

let exporter = LogstashExporter::new("logstash.example.com", 5044)?
    .with_tls(true);

Trait Implementations

impl AuditExporter for LogstashExporter

fn export<'life0, 'async_trait>( &'life0 self, event: AuditEvent, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Export a single audit event.

fn export_batch<'life0, 'life1, 'async_trait>( &'life0 self, events: &'life1 [AuditEvent], ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Export multiple events in a batch.

fn flush<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Flush any buffered events.

fn close<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<()>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Close the exporter and release resources.