Until now my ELK setup looks like this
Logstash Forwarder -> Logstash 1.4 -> Elstatic Search
Now I want to replace the Forwarder by a full blown Logstash, so I
can collect data from more inputs than just files and can get rid of the
lumberjack protocol with its need to secure communication (which made
always trouble). I also switched to Logstash 2.0.0 and have now the
Logstash 2.0.0 -> Logstash 2.0.0 -> Elastic Search
I hoped I could use not secured filebeat protocol between the first
logstash instance and the second, but I don't see any (File)beat output
for logstash. For now I'm using http, but this seems to be far to slow.
Is there a way to use Filebeat between 2 full blown logstash
instances, or what would be a appropriate way to let them communicate
without the need to install more infrastructure like messaging providers
or things like that?