ability to choose sending data into logstash

[benyamindfring]

it would be great to allow sending data to logstash first, and not directly to ES. sometimes (many times) it is necessary to perform additional work on the data before indexing.

what do you think? i'm assuming it just requires to change the bulk push from using the ES restApi to just sending json to logstash.

[ghost]

I agree with this so I'll definitely upvote.

However for my use case, our ELK/Elastic Stack architecture has Kafka as the front-end message queue. For data shippers that can't send to Kafka we have Logstash Shippers to act as a proxy just in case.

But maybe a valid workaround until Logstash support is added is to set up an Elasticsearch Ingest Node.

[amaury-d]

Hello, is there any news on this topic ?

I'd like to monitor technical metric of nodejs and be able to forward it to a logstash.

Best regards