Filebeat and logstash-output with loadbalance

Elastic Stack Beats
1

from documentation:

loadbalance: If set to true and multiple Logstash hosts are configured, the output plugin load balances published events onto all Logstash hosts. If set to false, the output plugin sends all events to only one host (determined at random) and will switch to another host if the selected one becomes unresponsive.

Could any one explain more deep this phrase? With loadbalance filebeat send events to all logstash hosts => do all logstash receive duplicate event? if one event send to all logstash - in elasticsearch will appear duplicate documents?
OR filebeat read one events, send to one logstash, read next event, send to next logstash?

2

Filebeat sends one event to one host. There is no duplication among LS hosts.

3

thanks!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.