Can you ingest Spring boot logs directly from the App into elastic via TCP

I'm investigating feasability of sending spring boot application logs directly into Elasticsearch. Without using filebeats or logstash. But with the Ingest plugin.

I'm wondering if this is possible? If it is possible what would be the pitfalls etc.

My initial thoughts are to do this using logback as that comes preinstalled with spring boot.

https://github.com/logstash/logstash-logback-encoder

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <appender name="stash" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
      <destination>127.0.0.1:4560</destination>
      <encoder class="net.logstash.logback.encoder.LogstashEncoder" />
  </appender>

  <root level="DEBUG">
      <appender-ref ref="stash" />
  </root>
</configuration>

So looking at the above you can send logs directly into logstash. Im just wondering if it was possible to use the newer functionality of ingest and skip using logstash? By sending json encoded logs directly into elastic over the network using the ingest method?

A New Way To Ingest - Part 1 | Elastic Blog

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.