# Receiving elasticsearch bulks in Logstash input

**URL:** https://discuss.elastic.co/t/receiving-elasticsearch-bulks-in-logstash-input/376867
**Category:** Logstash
**Created:** [April 7, 2025, 12:25pm UTC](https://discuss.elastic.co/t/receiving-elasticsearch-bulks-in-logstash-input/376867 "2025-04-07T12:25:48Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![wedkarz014](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wedkarz014/32/48935_2.png) [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)
#### Post date: [April 7, 2025, 12:25pm UTC](https://discuss.elastic.co/t/receiving-elasticsearch-bulks-in-logstash-input/376867/1 "2025-04-07T12:25:48Z")

</div>

Hi,  
Now, we use direct integration, application (es\_output) to elasticsearch (using ingest pipeline)  
But we would like to add logstash to our architecture. Is it possible to don't change output in the application, so es and receive the data in logstash? I tried with http and tcp input, using es\_bulk codec but it doesnt work.  
Can you help me?

Best

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 7, 2025, 2:09pm UTC](https://discuss.elastic.co/t/receiving-elasticsearch-bulks-in-logstash-input/376867/2 "2025-04-07T14:09:23Z")

</div>

If you have an application that sends bulk requests to elasticsearch and you want to insert logstash between them then [this](https://discuss.elastic.co/t/forwarding-my-bulk-records-from-http-input-plugin-to-elasticsearch-output-plugin-discuss-the-elastic-stack/375866) thread might help.

---

<div class="post-metadata">

### Author: ![wedkarz014](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wedkarz014/32/48935_2.png) [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)
#### Post date: [April 8, 2025, 8:58am UTC](https://discuss.elastic.co/t/receiving-elasticsearch-bulks-in-logstash-input/376867/3 "2025-04-08T08:58:34Z")

</div>

Thank you! We'll check it
