I have a question around the interaction between filebeat and logstash. I have read that filebeat will slow down if logstash is under the pump a little. My question is what happens if logstash goes down or I turn it off? Does filebeat know that logstash didn't receive the entries? Does it try and resend the entries?
Also just to ensure I understand the reason to use a Filebeat. My understanding is it is just more lightweight than running a logstash instance on that machine?