Hi everyone,
I have been trying to figure out if logstash needs to be present anymore after the beats ability injecting directly to elasticsearch in post 5.4 versions in particular. Now we see beats of all sorts capable of shipping formatted messages to elastic and elastic has no issues handeling them without a format-agent in middle...
Thanks
Logstash isn't going away. Beats can ship directly, and more formats and recipes will be added, but Beats + the Elasticsearch Ingest node will not replace the heavy parsing and enriching that Logstash can do.
If your use case does not require that much processing, then feel free to use Beats and Elasticsearch. If you need more processing and enriching of your messages, Logstash will be there for you.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.