Migrating from Logstash Forwarder to Filebeatedit

Filebeat is based on the Logstash Forwarder source code and replaces Logstash as the method to use for tailing log files and forwarding them to Logstash. This guide contains information to help you migrate from Logstash Forwarder to Filebeat.

Filebeat introduces the following major changes:

  • The config file was restructured and converted from JSON to YAML.
  • The registry file, which stores the state of the currently read files, was changed.
  • Command line options were removed and moved to the configuration file.
  • Configuration options for outputs are now inherited from libbeat. For details, see the Beats Platform Reference.
  • A new Logstash input plugin called logstash-input-beats is required.