# Logstash vs Elasticsearch **URL:** \ **Category:** Elasticsearch\ **Created:** [September 24, 2014, 11:29am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940 "2014-09-24T11:29:11Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Andrew\_Rimmer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrew_rimmer/32/1076_2.png) [@Andrew\_Rimmer](https://discuss.elastic.co/u/Andrew_Rimmer)\ **Post date:** [September 24, 2014, 11:29am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940/1 "2014-09-24T11:29:11Z")
What is the benefit of using Logstash over indexing directly into Elasticsearch? I have all of my data that needs indexing going into a queue. At the moment I have a small program that gets the messages from the queue and adds them into Elasticsearch. How would this be different if I were to use Logstash, and what would be the pros and cons for indexing directly into Elasticsearch vs using Logstash? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Itamar\_Syn\_Hershko](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/itamar_syn_hershko/32/725_2.png) [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\ **Post date:** [September 24, 2014, 11:32am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940/2 "2014-09-24T11:32:20Z")
Mainly the ability to parse log texts easily and restructure it as json ("grok") There's no "better" way really, if your app knows what it's doing and you use batching and have proper error recovery its probably better to have it that way -- Itamar Syn-Hershko [http://code972.com](http://code972.com) | @synhershko [https://twitter.com/synhershko](https://twitter.com/synhershko) Freelance Developer & Consultant Author of RavenDB in Action [http://manning.com/synhershko/](http://manning.com/synhershko/) On Wed, Sep 24, 2014 at 2:29 PM, Andrew Rimmer [andrew@outofmemory.co.uk](mailto:andrew@outofmemory.co.uk) wrote: > What is the benefit of using Logstash over indexing directly into > Elasticsearch? > > I have all of my data that needs indexing going into a queue. At the > moment I have a small program that gets the messages from the queue and > adds them into Elasticsearch. > > How would this be different if I were to use Logstash, and what would be > the pros and cons for indexing directly into Elasticsearch vs using > Logstash? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1\_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J\_AhwoDA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J_AhwoDA%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Andrew\_Rimmer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrew_rimmer/32/1076_2.png) [@Andrew\_Rimmer](https://discuss.elastic.co/u/Andrew_Rimmer)\ **Post date:** [September 24, 2014, 11:37am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940/3 "2014-09-24T11:37:18Z")
So I am not losing out on anything by using my own service to write directly to Elasticsearch, that is good to know. My data already serializes nicely into json, so there isn't really much effort into preparing it for indexing in Elasticsearch. On 24 September 2014 12:32, Itamar Syn-Hershko [itamar@code972.com](mailto:itamar@code972.com) wrote: > Mainly the ability to parse log texts easily and restructure it as json > ("grok") > > There's no "better" way really, if your app knows what it's doing and you > use batching and have proper error recovery its probably better to have it > that way > > -- > > Itamar Syn-Hershko > [http://code972.com](http://code972.com) | @synhershko [https://twitter.com/synhershko](https://twitter.com/synhershko) > Freelance Developer & Consultant > Author of RavenDB in Action [http://manning.com/synhershko/](http://manning.com/synhershko/) > > On Wed, Sep 24, 2014 at 2:29 PM, Andrew Rimmer [andrew@outofmemory.co.uk](mailto:andrew@outofmemory.co.uk) > wrote: > > > What is the benefit of using Logstash over indexing directly into > > Elasticsearch? > > > > I have all of my data that needs indexing going into a queue. At the > > moment I have a small program that gets the messages from the queue and > > adds them into Elasticsearch. > > > > How would this be different if I were to use Logstash, and what would be > > the pros and cons for indexing directly into Elasticsearch vs using > > Logstash? > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d65d3fbe-6d91-488f-a5cb-f91e0d07d5fb%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > -- > You received this message because you are subscribed to a topic in the > Google Groups "elasticsearch" group. > To unsubscribe from this topic, visit > [https://groups.google.com/d/topic/elasticsearch/bhuBUIaZMoU/unsubscribe](https://groups.google.com/d/topic/elasticsearch/bhuBUIaZMoU/unsubscribe). > To unsubscribe from this group and all its topics, send an email to > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1\_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J\_AhwoDA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J_AhwoDA%40mail.gmail.com) > [https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1\_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J\_AhwoDA%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CAHTr4ZtibdkOP1_-QPFDaTZ1iBhZrK2W1M9SUacx%2B2J_AhwoDA%40mail.gmail.com?utm_medium=email&utm_source=footer) > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CANHkSS3RnAVCibceiRr-Z7nW4O\_QuOUy1zA1xQqca059g%3DbSKA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CANHkSS3RnAVCibceiRr-Z7nW4O_QuOUy1zA1xQqca059g%3DbSKA%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:00am UTC](https://discuss.elastic.co/t/logstash-vs-elasticsearch/19940/4 "2017-07-06T01:00:16Z")