Log pipeline

Logstash & Beats

Elastic N.V.

The canonical ELK shippers: Filebeat tails files cheaply at the edge, Logstash does heavier parsing/enrichment/fan-out (commonly Filebeat → Logstash → Elasticsearch).

Category
Log pipeline
License
Open core
Deployment
Self-hosted
Cost
Free
Free tier
Yes
Self-host effort
Moderate
Maturity
Established
Popularity
Ubiquitous as the default ELK ingestion path

The catch

Logstash is the heavy one — JVM memory footprint and grok-filter tuning make it resource-hungry and fiddly, which is why many teams swap it for Fluent Bit or Vector.

Monitors

LogsServersK8s

Protocols

Syslog

Built for

SRE / DevOpsEnterprise