- logstash-forwarder will ship log events over the network directly to a Logstash instance, typically on another server. Unless you explicitly configure Logstash to stream those logs on an on-disk file they will never be stored on disk.
- Filebeat, Packetbeat, and Topbeat collect and ship different kinds of data and they all use libbeat as a library with common functionality.