Sending to Ingest Node

I'm considering sending directly from filebeat to elasticsearch ingest nodes. Can I ask, how reliable is this vs using the beats protocol to logstash?


I would say there is little difference. Both protocols have acknowledgements built in and Filebeat will retry until the data has been acknowledged by the receiver.

Ok, thank you. Which does the best job of preventing duplicates? Or is the only way to use fingerprints to generate document ids?


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.