I have started learning about ELK. The initial tutorial I came across , uses NGINX logs and NGINX Filebeat module for the demo. I see that we can configure Filebeat to send the logs directly to elasticsearch. If Filebeat can do that, I am trying to understand why Logstash would be required.
Can someone please help me or provide me the pointers that can help me understand why Logstash would be required.