mbudge

+1 for Azure Openshift.

I've added this to the elasticagent pipeline so metrics data only than 1 day gets dropped. ``` if [data_stream][type] == "metrics" { ruby { init => "require 'time'" code =>...

We want to avoid using dead letter queues as we still want to see other indexing errors in the logatsh logs. It's just the metrics data/TSDB indexes which are a...

Another option would be to add some code to the metrics ingest pipelines which drops events older than X days.

dlq_custom_codes are is addition to 400 and 404, which is why I want to stay away from DLQ so we can monitor logs for 400 and 404 errors in Logstash...

Can close this. fleet is going to support multiple outputs which will allow us to send metrics data direct to Elasticsearch. System logs data can go to logstash.

This would be useful.

Any update on this?

Please don't set the headers field like the http input plugin. We can drop the headers field at logstash, but can't prevent it clashing from any raw events which might...

Any progress on this? Enterprise customers with networks spread across many regions will probably need multiple logstash servers. The HTTP > HTTP is okay, but it would be better if...