Sending to Ingest Node


#1

Hi,
I'm considering sending directly from filebeat to elasticsearch ingest nodes. Can I ask, how reliable is this vs using the beats protocol to logstash?

Regards,
D


(Christian Dahlqvist) #2

I would say there is little difference. Both protocols have acknowledgements built in and Filebeat will retry until the data has been acknowledged by the receiver.


#3

Ok, thank you. Which does the best job of preventing duplicates? Or is the only way to use fingerprints to generate document ids?


(Christian Dahlqvist) #4

Yes.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.