We are using ELK in production, and some apps are shipping to logtash via ZeroQM and files..
Occasionally our servers go offline, and sometimes logstash can't boot-up properly.
We have a fallback that ships the logs via files, but it's disabled by default.
We would like to find a way to check with the logstash-server that it is alive, and if not getting a response, then reactivate the fallback to file-shipping immediately, so we don't loose any logs.
Is there an easy way to configure logstash with this kind of check?
Perhaps using a specific topology on another input that echoes something back?
Any tips would be appreciated