Filebeat and Logstash

Elastic Stack Beats
1

I have a question around the interaction between filebeat and logstash. I have read that filebeat will slow down if logstash is under the pump a little. My question is what happens if logstash goes down or I turn it off? Does filebeat know that logstash didn't receive the entries? Does it try and resend the entries?

Also just to ensure I understand the reason to use a Filebeat. My understanding is it is just more lightweight than running a logstash instance on that machine?

Thanks
Matt

2

My question is what happens if logstash goes down or I turn it off? Does filebeat know that logstash didn't receive the entries?

Yes.

Does it try and resend the entries?

Yes.

Also just to ensure I understand the reason to use a Filebeat. My understanding is it is just more lightweight than running a logstash instance on that machine?

Yes, that's the main reason.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.