I found out my Logstash has no logic except for forwarding log to Elasticsearch. Filebeat has many logic instead of Logstash(filtering etc.)
In my case, Still do i need Logstash?? Why??
I found out my Logstash has no logic except for forwarding log to Elasticsearch. Filebeat has many logic instead of Logstash(filtering etc.)
In my case, Still do i need Logstash?? Why??
In such case, Filebeat may send data to elasticsearch directly. The doc is here.
If you are not doing any filtering or data enrichment in logstash and it is only sending to Elasticsearch, then maybe you do not need to use Logstash and can configure Filebeat to send directly to Elasticsearch.
It really depends on your use case.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.