Hello,
I have a question that seems naive at first but is very relevant.
Imagine that I have 300 agents (Beats), which are linked with a logstash. after modifying the loogstash conf file (add filter or other), do I have to stop all 300 agents?
Thank you
No, you do not. You just need to restart logstash (unless you started it with either -r or --config.reload.automatic).
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.