2 ms·
Yes. Newer versions of Logstash have an on-disk queue that will store events that haven't been ACK'd by ElasticSearch. On the other side, every Beat (or nearl
by coredog64 9y ago
Yes. Newer versions of Logstash have an on-disk queue that will store events that haven't been ACK'd by ElasticSearch.
On the other side, every Beat (or nearly every Beat) can write to a messaging product like Kafka. That allows you to get logs off your client in the face of failures in either Logstash or ElasticSearch.