Writing logs to Logstash directly or better through filebeat (Application performance perspective)?

Question

I'm doing a trade off between making my applications pushing directly to Logstash VS through Filebeat ?

I'm talking about the application performance & the emergencies perspectives ?

I know that Filebeas one of its options is the logstash loadbalancing by accepting multiple nodes in its configurations , on the opposite side pushing the logs directly to logstash from the application and using a proxy server in order to route internally between the logstash nodes.

So I need you recommendation for the long term solution with heavy pushes

Answer 1

I would suggest you take a look at Logging in the Cloud , which specifically discusses logging using ELK. Although your application may not be running in a cloud environment it is always a good idea to develop as if it will be.