Benefits of Metricbeat direct to ES vs Metricbeat Logstash?

Elastic Stack Beats
1

Hello

We are looking into installing Metricbeat on 8 customer application servers to get a better overview of what is happening regarding cpu,memory etc usage. At this stage we would only be using system and windows modules

Currently we have ELK setup with filebeat sending application logs from those same 8 application servers and it runs well for the most part.

In this environment/scenario is there any benefit to using sending metricbeat data to logstash rather than sending direct to elasticsearch ?

Thanks in advance

2

Hi @randomnamegenerator

If you look at this and just replace agent with metricbeat beat it will give you some insight.

But in short if you are doing just basic metrics.. putting logstash in the middle is mostly about single egress point and perhaps queuing...

Metrics tend to have a pretty constant rate so queueing is more about if Elasticsearch is unavailable.

Metricbeat straight to Elasticsearch is a perfectly fine architecture as well

3

Thanks for the reply