Just poking around to see what the typical setup looks like.
I see a lot of people have a Logstash Server that they forward messages to. And that server in turn forwards data to Elasticsearch.
Is the Logstash Server resource intensive? I was thinking that Logstash would run on my application server. But it seems most people now have Filebeat to do the file moving. I do not have many servers. Should I run Logstash on my Elasticsearch server (I only have one for now) or standalone? Or on the app server?
Feeling a little confused and overwhelmed by the choices. Thanks.