elastic / elastic/logstash

Discuss bundling filebeat and beats-input into one gem - to replace the file-input.

Open
#5,983 3 comments 2 reactions 0 assignees View on GitHub
design discuss enhancement
Dominant language
Java
Stars
14.9k
Forks
3.5k
Avg merge
19h 14m
Merged PRs (30d)
63

Description

Some ideas to explore (PH and I discussed this v. briefly in Prague):
- The filebeat and the beats input would run on the same machine and not on the edge.
- Logstash would control the filebeat lifecycle (similar to prelert integration if and when).
- Logstash will supply the beats config by translating the file-input user config initially but allow for the filebeat config to be specified directly in the user config with some keys in the `logstash.yml` if it made sense.
- The filebeat executable would ship with the gem.
- The docs for such a dual tech input would be filebeat + beats input docs merge plus clean up.
- Support would more easily support just one setup.
- Our local testing would give us more real world coverage.

/cc @ruflin

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.