CODEWITHSUNDEEP
elasticsearchlogstashkibanafilebeat
learner
learner

Reputation: 4818

What are the advantages of using filebeat as shipper?

Filebeat is used to ship log data into logstash. Logstash read that data at port 5044. 

input {
  beats {
    port => 5044
  }
}

We can directly feed data into logstash. 

input {
  file {
    path => "/tmp/access_log"
    start_position => "beginning"
  }
}

My question is that why do we need filebeat as a shipper? What are the advantages of using filebeat as shipper?

Upvotes: 0

Views: 1336

Answers (1)

Val
Val

Reputation: 217294

The idea is to install Filebeat on every server you need to gather logs and stats from. Each of those Filebeat instances will grab and ship the logs as fast as possible without any processing to a centralized Logstash instance where the bulk of the processing and filtering can take place.

Formerly, Logstash had a lightweight logstash-forwarder module which would perform more or less the same work as Filebeat does. Filebeat is the new official and standard way of centralizing logs from all your different hosts.

Upvotes: 1

Related Questions