Is it necessary to use filebeat in ELK stack for collecting logs like installing filebeat on all the servers from where we need to collect logs and installing Logstash, ES and Kibana in a single separate server. Or can we install Logstash on all the servers to collect logs and install ES and kibana…

So if I am understanding correctly then it is not necessary to use filebeat at all. I will use logstash on all the client servers and forward the logs to ES installed on a different server?

That is an option, but filebeat is a much lighter weight process than logstash. It really depends on how much processing you want to do to the logs. For minimal processing you may not need logstash at all, just install filebeat everywhere and point it to elasticsearch with an ingestion pipeline con…

Is it necessary to use filebeat or logstash forwarder in ELK stack?

Elastic Stack Logstash

Badger September 4, 2020, 10:41pm 2

filebeat everywhere and logstash everywhere are both valid options.

If you want to use TLS to secure connections then yes, you will of course need certificates.

Topic		Replies	Views
LogStash Stack Decsision Logstash	6	1097	July 6, 2017
Logstash VS Filebeat Logstash	4	4407	April 19, 2018
Filebeat => Logstash in Elastic Cloud Beats filebeat	4	1008	May 7, 2019
How to connect two servers to Filebeat? Logstash	6	2490	June 6, 2019
SSL between Filebeat and Logstash which is on SAME SERVER Beats filebeat	2	884	July 25, 2019

Is it necessary to use filebeat or logstash forwarder in ELK stack?

Related topics