Logstash tcp output to logstash tcp input, losing metadata?

Elastic Stack Logstash
1

Hi,

I have two logstash servers. Logstash#1 is using tcp output to send data to logstash#2 tcp input. It works fine, but the metadata and fields I add in logstash#1 never seems to reach logstash#2.

Maybe I'm doing something wrong?

If I send logstash#1 output directly to elasticsearch all data is there.

Best Regards,
Bjorn

2

If you are adding metadata to [@metadata] then it should not be transmitted by the output. If you are adding other fields to the event then it should.

If you are connecting logstash to logstash then the recommended solution is a lumberjack output and a beats input.

What do your logstash configurations look like?

1 Like
3

Oh yes, I will try that. Forgot to add it to the event itself.

This is just a test setup. We are actually going to use kafka output to kafka input later (kafka before logstash#2).

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.