Logstash

Server-side data processing pipeline: Logstash is a data-processing engine that ingests events from many sources, transforms them, and ships them to destinations, acting as the central pipeline that normalizes and enriches data in transit.

Data ingestion from multiple sources (input plugins): A broad library of input plugins lets Logstash collect data from files, syslog, message queues, network protocols, databases, and many other sources, consolidating heterogeneous inputs into one pipeline.

Data parsing and transformation (filter plugins): Filter plugins parse, restructure, and transform events as they pass through, turning unstructured or raw data into structured records suitable for storage and analysis.

Data output to multiple destinations (output plugins): Output plugins deliver processed events to a wide range of destinations such as search/analytics stores, files, message queues, and monitoring systems, allowing one pipeline to feed multiple targets.

Log collection and aggregation: Logstash gathers and aggregates log data from across an environment into a unified stream, centralizing logs that originate from disparate systems and formats.