gogstash icon indicating copy to clipboard operation
gogstash copied to clipboard

Is the official filebeats input compatible?

Open TateDeng opened this issue 6 years ago • 4 comments

I mean since the file input is deprecated, is the official filebeats compatible as an input which we can configure in yaml or json directly and then maybe configure kafka as an output?

even more, can we run another gogstash instance to use kafka as an input and es as an output in the meanwhile?

TateDeng avatar Jun 12 '19 07:06 TateDeng

You could use input/beats to receive filebeat, metricbeat or other beats events.

#80 has previous version gogstash configuration for beats input.

What's more, Kafka input or output not support currently.

tengattack avatar Jun 12 '19 08:06 tengattack

You could use input/beats to receive filebeat, metricbeat or other beats events.

#80 has previous version gogstash configuration for beats input.

What's more, Kafka input or output not support currently.

Thanks for the kindly reply, however, I am afraid that I couldn't fully understand it. You mean configure filebeat as input like this so that the gogstash would be the output of filebeat as logstash did? **_input:

  • type: beats port: 5044 reuseport: true host: 0.0.0.0 ssl: false_**

Per my understanding, this seems to be a HTTP input, how would that work?

TateDeng avatar Jun 12 '19 09:06 TateDeng

It should work with filebeat, just configure the filebeat logstash output endpoint to gogstash instance's input/beats will be fine.

tengattack avatar Jun 12 '19 10:06 tengattack

It should work with filebeat, just configure the filebeat logstash output endpoint to gogstash instance's input/beats will be fine.

Thanks for the explanation, I will have a try later, really appreciate for your help.

TateDeng avatar Jun 13 '19 02:06 TateDeng