Which process comes first in Filebeat v.8？

Elastic Stack Beats
1

Hello. I'm using Filebeat v.8.6.2 to send data to Logstash with filestream input type and I'm curious about which process comes first.

  1. Harvest input file data(end of file reached)
  2. Connecting Filebeat to Logstash
2

According to the FB log, it's read lines, make a bulk batch(default is 2048 events), connect to LS, send data, and again and again. You can see activities in FB logs, especially in the debug mode.

How Filbeat works
Configure the Logstash output

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.