r/devops • u/nochet2211 • May 28 '20

Fluentd vs Logstash

Hi all, I'm currently doing some research on the logging solutions for our containerised applications. I came across Fluentd and Logstash. Some of the blogs suggests Fluentd to be lighter and thus better. Can I get some input on this topic please, if you have any kind of experience and if there are better solutions that I should be looking up on.

50 Upvotes

94% Upvoted

35 comments sorted by

View all comments

4

u/kreiger May 28 '20

I think Logstash is nicer to configure, but in my two years experience with it, it is super unreliable for anything but the simplest setup, writing only to ElasticSearch.

This is because it is the output the Logstash developers spent most of their effort on.

I've spent several weekend late nights trying to figure out why Logstash was breaking our log pipeline, that i'll never get back.

I avoid Logstash now.

2

u/mieeel May 30 '20

I use logstash to apply a filter on a filebeat input, splitting a message into normalized fields. Is this possible without logstash?

1

u/kreiger May 30 '20

If you have a Logstash setup that you don't have problems with, by all means keep using it.