Does Logstash guarantee atomicity of multiple output options?
For Example, if I set 2 different outputs to Elasticsearch A and B, and when connection to Elasticsearch A is temporarily unstable, can Logstash stop sending data to ES B or do rollback for sended data to ES A ?
No, it does not. logstash has an at-least-once delivery model, but that is affected by whether you use persistent queues, whether restarts or crashes occur and suchlike. It does not support rollback once an event has been sent to an output.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.