Hi, In the docs it says that for topology mapping to work elasticsearch must be enabled as an output. In most circumstances users will need to send logs via logstash for sanitisation. So, will it not be that enabling elasticsearch as an output, to enable this feature, leads to duplication entries …

Beats and Topology Maps

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Beats and Topology Maps