Hello, I am thinking about sending my logfiles to a logstash instance to parse some events, then send the output for another logstash instance to parse another events, based on the extracted events by the first logstash instance.
Is that possible? can Beats do some parsing like logstash or it just sends logfiles?
Never tried to send a Logstash output as a input for another Logstash, in theory you can, you also can send the first logstash output to a file and make the second Logstash read that file, but can you give an example of the events that you want to parse in the first and the second instance?
Maybe you can combine conditionals, tags and filters and only use one instance.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.