As we want to reduce the amount log indexing into ES nodes, i would like to know if filebeat or logstash has filters to do sampling? For example, can the filebeat push only 1 of every 5 lines from the log files to logstash? Or can logstash can push only 1 of every 5 lines to ES nodes?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.