Elastic

If one is using ELK, is it a must to also use filebeat? In what scenarios it's useful to use filebeat?

Difficulty: unrated

Source: bregman-arie/devops-exercises by Arie Bregman

Answer

Filebeat is a typical component of the ELK stack, since it was developed by Elastic to work with the other products (Logstash and Kibana). It's possible to send logs directly to logstash, though this often requires coding changes for the application. Particularly for legacy applications with little test coverage, it might be a better option to use filebeat, since you don't need to make any changes to the application code.