If data send from filebeat to logstash then Elasticsearch.
How to prevent data loss if
case 1. Logstash not available
case 2 elasticsearch not available
any special configuration can be performed in both filebeat and logstash?
I cannot speak to filebeat, but logstash has an at-least-once delivery model. If elasticsearch is down it will stop processing events when the queues fill up, and tell filebeat to stop sending it data.
1 Like
Big thx