I have to install Logstash, in the documentation explain that i can use Logstash 8.x with ECS and with OpenSearch output plugin.
If i want to install filebeat on openshift cluster, which version i have to choose?
Another question is, is logstash last version is compatibility with os 2.19?
@abarocco In the Filebeat scenario the compatibility should be between Logstash and Filebeat. Then Logstash will use OpenSearch output plugin to connect with OpenSearch and ingest the data.
I couldn’t find detailed compatibility matrix for OpenSearch output Plugin and Logstash. However, I’ve used the following Dockerfile to build my Logstash image. Then I pushed over 1 million documents in 30 minutes. No issues so far.
.env
LOGSTASH_VER=8.18.0
Dockerfile
ARG LOGSTASH_VER
FROM docker.elastic.co/logstash/logstash-oss:${LOGSTASH_VER}
RUN logstash-plugin install logstash-integration-aws
RUN logstash-plugin install logstash-output-opensearch