Connection logstash to filebeat

Elastic Stack Logstash
1

Hi Team,

I'm looking for a way to connect a logstash to filebeat but i can't find any way.
In documentation neither in internet, may be someone already tried that before.

Destination is to have:

kafka stream to logstash and logstash stream to filebeat and filebeat stream to another logstash in a distant site==>

kafka ==> logstash ==> filebeat ==> logstash

Thanks,

2

What's the point of Filebeat? Why not just connect the two Logstash instances with a set of lumberjack inputs/outputs?

Logstash can't connect to Filebeat in the network sense since Filebeat doesn't listen to network connections, but you can of course use a file output in Logstash that writes to a file that Filebeat monitors.

3

Hi,

thanks @magnusbaeck, i open another discussion about lumberjack.
We don't have this option with logstash "6.3"..
No way to get "lumberjack input plugin".

We are working on disconnected mode and no one can get got it here if we can't got it on offline mode.
So, we are blocked with the logstash 6.3. This is only working with 2.X version.

Another detail, that lumberjack is deprecated and will be removed in futur from ELK plugin list.

Regarding filebeat, we can't use it as input to the (1) logstash because is not compatible with kafka.

Thanks,

4

The lumberjack output plugin should be able to connect to a beats input plugin.

5

Yeah, exactly i'm using that actually.
But the message is malformed, there's another topic already opened for this:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.