Why do i need Logstash if filebeat can send data to Elasticsearch

Hi @magnusbaeck

Thanks for precise information. Actually i was looking for to add Filter property in Filebeat so that my nodes send data directly to ES in a format which i am expecting for kibana. But it seems like filebeat does not offer grok filtering method, according to following thread.

but don't you think its enough to use filtering at prospector level can done the job for me. Here is my previous thread (where u already have answered a lot :slight_smile: ) which show how my logs look like and what grok filter i have applied to parse it.

Whats your Suggestion? do i still need a Logstash ? i have not yet tested Filebeat and prospector level filtering, that's why asking community about there experiences ?

Thanks in advance
best regards