# Input as elasticsearch and output to logstash

**URL:** <https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214>\
**Category:** Logstash\
**Created:** [September 27, 2024, 6:52am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214 "2024-09-27T06:52:05Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![shailendra1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shailendra1/32/122783_2.png) [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Post date:** [September 27, 2024, 6:52am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/1 "2024-09-27T06:52:05Z")

</div>

Hello All,

i have a use case where i need to use my elastic indices to use and dumps to the another logstash clusters (graylog opensearch indices) system  
is it worthy to use the logstash and get input as my elasticsearch indices and output to the graylog cluster logstash.

i am trying with this POC , kindly suggest if is there any other better approch too . below is my logstash config -

```auto
input {
   elasticsearch {
        hosts => ["https://app1a.uat.abc.com:9210", "https://app2a.uat.abc.com:9210", "https://app3a.uat.abc.com:9210"]
        ssl => true
        ssl_certificate_verification => true
        user => "logstash-user"
        password => "$logstash-pwd"
        index => "myindex1-*"
        size => 10000
  }
}
output
{
 logstash {
  hosts => ["host2a.uat.abc.com"]
  port => 6019
  ssl => true
  ssl_certificate_authorities => ["/myssl/key.pem"]
        }
}

```

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [September 27, 2024, 7:20am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/2 "2024-09-27T07:20:12Z")

</div>

Hey Shailendra, I guess this is the best approach as logstash is capable to do all such ETL tasks. Let us know if you finding any difficulties.

---

<div class="post-metadata">

**Author:** ![shailendra1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shailendra1/32/122783_2.png) [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Post date:** [September 27, 2024, 7:44am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/3 "2024-09-27T07:44:04Z")

</div>

Hi @ashishtiwari1993 , thanks for your response.

I am being trying the same approch further. i also getting the plugin errors as below pasted .

```auto
[2024-09-27T15:41:55,022][ERROR][logstash.plugins.registry] Unable to load plugin. {:type=>"output", :name=>"logstash"}
[2024-09-27T15:41:55,027][FATAL][logstash.runner] The given configuration is invalid. Reason: Unable to configure plugins: (PluginLoadingError) Couldn't find any output plugin named 'logstash'. Are you sure this is correct? Trying to load the logstash output plugin resulted in this error: Unable to load the requested plugin named logstash of type output. The plugin is not installed.

```

i have given my config as below -

```auto
output
{
 logstash {
  hosts => ["host2a.uat.abc.com"]
  port => 6019
  ssl => true
  ssl_certificate_authorities => ["/myssl/key.pem"]
        }
}

```

i have shared the complete in earlier post. can help or suggest me here thanks.

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [September 27, 2024, 7:47am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/4 "2024-09-27T07:47:23Z")

</div>

May I know which version of logstash you're using?

---

<div class="post-metadata">

**Author:** ![shailendra1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shailendra1/32/122783_2.png) [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Post date:** [September 27, 2024, 7:50am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/5 "2024-09-27T07:50:47Z")

</div>

I am using logstash-8.13.2

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [September 27, 2024, 8:05am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/6 "2024-09-27T08:05:15Z")

</div>

You need to install that plugin -

```auto
./bin/logstash-plugin install logstash-integration-logstash

```

---

<div class="post-metadata">

**Author:** ![shailendra1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shailendra1/32/122783_2.png) [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Post date:** [September 30, 2024, 10:31am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/7 "2024-09-30T10:31:16Z")

</div>

@ashishtiwari1993 , i understand it. but i dont have internet connections so i was testing the offline output plugin configurations but seems its failed .  
may you help how do we create the output pluging without internet connections ? thanks in advance.

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [October 1, 2024, 5:41am UTC](https://discuss.elastic.co/t/input-as-elasticsearch-and-output-to-logstash/367214/8 "2024-10-01T05:41:46Z")

</div>

Hi Shailendra, You can refer this [offline plugin management](https://www.elastic.co/guide/en/logstash/current/offline-plugins.html) doc.