Elastic's Logstash is a data processing pipeline that ingests events from numerous sources using a plugin-based architecture. It can parse, transform, and normalize this data in-flight by applying conditional logic, filtering unwanted events, and using codecs to handle different data formats. Logstash enriches events by adding, removing, or modifying fields and can buffer data in queues for resilience. Processed data can then be routed to multiple destinations simultaneously, including other Logstash pipelines, with a dead letter queue available for handling events that fail to process.
