Company
Date Published
Author
Alvin Chen
Word count
446
Language
English
Hacker News points
None

Summary

Logstash is undergoing significant changes to enhance its robustness and feature set, including the deprecation of certain legacy components like the node protocol for Elasticsearch output and the multiline filter. The node protocol, known for its complexity and maintenance challenges, is being replaced by the more efficient and easier-to-use HTTP protocol, which will become the default in Logstash 2.0. This shift is recommended before the next major release, especially since the node protocol is incompatible with Shield-protected Elasticsearch clusters. Meanwhile, the multiline filter is being deprecated in favor of the multiline codec, which offers improved performance and bug fixes, with migration encouraged to streamline processing earlier in the pipeline. Users can also utilize Filebeat for multiline processing at the data edge. These updates are part of Logstash's evolution, with further insights to be shared at the Elastic{ON}^16 user conference.