# Is it possible to send logs from Logstash 2.x to Logstash 6.x?

**URL:** <https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907>\
**Category:** Logstash\
**Created:** [January 10, 2018, 3:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907 "2018-01-10T15:27:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![amruth](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@amruth](https://discuss.elastic.co/u/amruth)\
**Post date:** [January 10, 2018, 3:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/1 "2018-01-10T15:27:46Z")

</div>

Hi,

I am trying to setup to send logs from Logstash 2.x to Logstash 6.x. Can someone please say if it's possible?

Thanks

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [January 10, 2018, 3:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/2 "2018-01-10T15:57:54Z")

</div>

I can't tell whether you mean:

1. replace a 2.X solution with 6.X
2. have a 2.X LS instance send events to a 6.X instance.

---

<div class="post-metadata">

**Author:** ![amruth](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@amruth](https://discuss.elastic.co/u/amruth)\
**Post date:** [January 10, 2018, 5:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/3 "2018-01-10T17:32:23Z")

</div>

Hi Guy,

My current setup is - I have a Logstash 2.x forwarding logs to Logstash 5.x.

I am planning to upgrade Elasticsearch to 6.x. And I read that only Logstash 5.6-6.x is supported with Elasticsearch 6.x. And so I want to replace Logstash 5.x with Logstash 6.x.

So I am wondering if Logstash 2.x can forward logs to Logstash 6.x.

Thanks

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [January 10, 2018, 5:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/4 "2018-01-10T17:34:10Z")

</div>

How are you doing the forwarding?

---

<div class="post-metadata">

**Author:** ![amruth](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@amruth](https://discuss.elastic.co/u/amruth)\
**Post date:** [January 10, 2018, 5:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/5 "2018-01-10T17:34:43Z")

</div>

I am using http output and input plugins.

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [January 10, 2018, 5:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/6 "2018-01-10T17:38:45Z")

</div>

With JSON on the wire?

I think that should work.  
Read the breaking changes docs.  
[https://www.elastic.co/guide/en/logstash/current/breaking-changes.html](https://www.elastic.co/guide/en/logstash/current/breaking-changes.html)  
especially this -\> [https://www.elastic.co/guide/en/logstash/current/breaking-changes.html#\_elasticsearch\_output\_changes](https://www.elastic.co/guide/en/logstash/current/breaking-changes.html#_elasticsearch_output_changes)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 7, 2018, 5:39pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-logs-from-logstash-2-x-to-logstash-6-x/114907/7 "2018-02-07T17:39:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
