ELK cluster?

(aabababba) #1

Can be equipped with filebeat out to multiple logstash, logstash and then out to multiple elasticsearch?
So logstash, elastic hanging one of them will not affect the cluster?

(Mark Walkom) #2

Filebeat can only send to one Logstash endpoint. You may want to put Logstash behind a load balancer and use a floating/virtual IP if you want more flexibility.

(aabababba) #3

how about out put to redis,then logstash get data from redis?

(Mark Walkom) #4

Sure, that'll work.

(aabababba) #5

how? use redis cluster or sentinel mode?

(Mark Walkom) #6

I don't know enough about redis these days to comment on which is more appropriate.

(aabababba) #7

thanks, I will try it.