Forwarding logs

trajano · October 13, 2019, 5:19am

I'm trying to set up a log spooling system where application logs sent by applications from one region is spooled and sent to another region.

Since logstash-forwarder is deprecated, I was thinking of how to do this without resorting to a temporary file then using filebeats.

Does it make sense to use lumberjack output to do something like this (since according to the lumberjack input documentation the Beats input supports the lumberjack protocol)

Christian_Dahlqvist · October 13, 2019, 5:36am

Logstash forwarder was deprecated and replaced by Filebeat quite a long time ago. Why not just have Filebeat and Metricbeat send directly to Logstash?

trajano · October 13, 2019, 5:39am

Where I put logstash-forwarder is basically logstash that has an output plugin using lumberjack to send to another logstash using beats.

Christian_Dahlqvist · October 13, 2019, 5:43am

If that case it looks OK to me.

system · November 10, 2019, 5:43am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.