I'm investigating feasability of sending spring boot application logs directly into elastic search. Without using filebeats or logstash. But with the Ingest plugin.
I'm wondering if this is possible? If it is possible what would be the pitfalls etc.
My initial thoughts are to do this using logback as that comes preinstalled with spring boot.
<?xml version="1.0" encoding="UTF-8"?> <configuration> <appender name="stash" class="net.logstash.logback.appender.LogstashTcpSocketAppender"> <destination>127.0.0.1:4560</destination> <encoder class="net.logstash.logback.encoder.LogstashEncoder" /> </appender> <root level="DEBUG"> <appender-ref ref="stash" /> </root> </configuration>
So looking at the above you can send logs directly into logstash. Im just wondering if it was possible to use the newer functionality of ingest and skip using logstash? By sending json encoded logs directly into elastic over the network using the ingest method?