# The Architecture of entperise log management system based on Elastic Stack 5.0.1 and Kafka 0.10.1.0

**URL:** https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356
**Category:** Logstash
**Created:** [November 17, 2016, 9:22am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356 "2016-11-17T09:22:55Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![obsicn](https://avatars.discourse-cdn.com/v4/letter/o/82dd89/32.png) [@obsicn](https://discuss.elastic.co/u/obsicn)
#### Post date: [November 17, 2016, 9:22am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356/1 "2016-11-17T09:22:55Z")

</div>

In blog "Just Enough Kafka for the Elastic Stack（[https://www.elastic.co/blog/just-enough-kafka-for-the-elastic-stack-part1）](https://www.elastic.co/blog/just-enough-kafka-for-the-elastic-stack-part1%EF%BC%89), Logstash takes the role of Shipper.

But Filebeat 5.0.1 can support Kafka Output Configuration([https://www.elastic.co/guide/en/beats/filebeat/current/kafka-output.html](https://www.elastic.co/guide/en/beats/filebeat/current/kafka-output.html)). So can LogstashShipper been removed and Filebeat send the data directly to Kafka?

Thanks.

Michael

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 17, 2016, 9:32am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356/2 "2016-11-17T09:32:05Z")

</div>

Yes, that'll work.

---

<div class="post-metadata">

### Author: ![obsicn](https://avatars.discourse-cdn.com/v4/letter/o/82dd89/32.png) [@obsicn](https://discuss.elastic.co/u/obsicn)
#### Post date: [November 17, 2016, 9:35am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356/3 "2016-11-17T09:35:49Z")

</div>

Hi Magnus, Thanks for your quick help.

If we choose Elastic Stack 5.0.1, filebeat send the log to kafka directly is a recommended solution for enterprise log management deployment? Just want to get the confirmation.

Thank you very much.

Michael

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 17, 2016, 10:26am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356/4 "2016-11-17T10:26:28Z")

</div>

I haven't tried any of the solutions myself but given Logstash's larger footprint I'd prefer using Filebeat if possible.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 15, 2016, 10:26am UTC](https://discuss.elastic.co/t/the-architecture-of-entperise-log-management-system-based-on-elastic-stack-5-0-1-and-kafka-0-10-1-0/66356/5 "2016-12-15T10:26:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.