Hi,
Im new to elasticsearch and its agents, and I'm having trouble understanding how to use the agents properly, especially ever since its trying to replace the beats family.
I'm trying to use elastic agents managed by a fleet server deployed as daemonsets in k8s to collect APM, which I think I fully understand how to do, but am stuck with collecting stdout logs from api deployed in a pod.
If I were to use Kubernetes container logs integration, and need to transform the log in some way, is it perfectly fine to configure and use a pipeline, or is it recommended to use logstash as well? Also, does the agent execute the pipeline, or is it elasticsearch nodes' job to do so?
If I have to use logstash, I am really confused to how to configure elastic agent to collect logs and send them to logstash via kibana if I'm using the custom logs integration.
TL;dr logstash + elastic agent or agent + k8s container logs + pipeline
Thanks.