I need a setup to monitor logs from 100 different machines. I checked beats framework and it seems i cannot install a package in the machine. Also does beats support Multi-line? Also as per this page https://www.elastic.co/guide/en/logstash/current/deploying-and-scaling.html , its better to send the data from logs to a message layer, then process it and then send to elastic search. I couldn't find a kafka output for beats.
So If i run very minimal logstash instance on tte 100 machines, with no processing and indexing, (Just throw the data to kafka with a multi-line filter added), will it have significant performance impact compared to using beats?