# Is Logstash going to die?

**URL:** <https://discuss.elastic.co/t/is-logstash-going-to-die/65505>\
**Category:** Logstash\
**Created:** [November 9, 2016, 2:10pm UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505 "2016-11-09T14:10:33Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Patrick\_Salomon](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@Patrick\_Salomon](https://discuss.elastic.co/u/Patrick_Salomon)\
**Post date:** [November 9, 2016, 2:10pm UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/1 "2016-11-09T14:10:33Z")

</div>

Hi there

Since Elasticsearch is now able to replace Logstash (with the ingest nodes), and with the fact that Logstash is not running as the same kind of service that all other products in the stack, and finally that Logstash was partially replace by Filebeat, I was wondering if Logstash is at its end of life?

Should we focus on switching to Elasticsearch instead to aggregate logs sent by Filebeat?

Thx

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 9, 2016, 2:16pm UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/2 "2016-11-09T14:16:22Z")

</div>

> Logstash is not running as the same kind of service that all other products in the stack

What do you mean by this?

---

<div class="post-metadata">

**Author:** ![Steve\_the\_one](https://avatars.discourse-cdn.com/v4/letter/s/c0e974/32.png) [@Steve\_the\_one](https://discuss.elastic.co/u/Steve_the_one)\
**Post date:** [November 9, 2016, 2:20pm UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/3 "2016-11-09T14:20:43Z")

</div>

I certainly hope it doesn't until Filebeat starts to support Kafka/RabbitMQ as output.

---

<div class="post-metadata">

**Author:** ![Patrick\_Salomon](https://avatars.discourse-cdn.com/v4/letter/p/9e8a1a/32.png) [@Patrick\_Salomon](https://discuss.elastic.co/u/Patrick_Salomon)\
**Post date:** [November 9, 2016, 2:32pm UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/4 "2016-11-09T14:32:23Z")

</div>

Check here:

> [@Logstash not a service on Amazon AMI frowning](https://discuss.elastic.co/t/logstash-not-a-service-on-amazon-ami/64483/14):
>
> All I am pointing out is that based on the documentation I see, and the output of the installation process, the expected behavior of Logstash is different than any of the other ELK stack services. Amazon Linux AMI release 2016.09 sudo yum list installed | grep elastic elasticsearch.noarch 5.0.0-1 @elasticsearch-5.x filebeat.x86\_64 5.0.0-1 @elastic-5.x kibana.x86\_64 5.0.0-1 @elasti…

Logstash is the only product from Elastic that is not started as the others (at least on some hosts)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 14, 2016, 10:32am UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/5 "2016-11-14T10:32:52Z")

</div>

No, Logstash is not going anywhere.

The Ingest node helps getting started at small scales, but most users find the need the added power and complexity of Logstash pretty quickly.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 12, 2016, 10:33am UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505/6 "2016-12-12T10:33:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.