Which of the following tasks can Logstash fulfill without using other components of the Elastic Stack? (Choose three.)
Which of the following tasks can Logstash fulfill without using other components of the Elastic Stack? (Choose three.)
Logstash can receive log data from remote systems through various input plugins. It can process log data to extract information by using filters and patterns. Logstash is also capable of forwarding log data to other services through its output plugins. However, it doesn't store data persistently as it primarily serves as a data processing and forwarding tool. Aggregating log data over time typically involves storing and querying, which falls more into the realm of Elasticsearch or another database.
Also seems to me that ADE is the proper answers.
Contains logstash aggregate filter plugin, but seems not the described feature. https://www.elastic.co/guide/en/logstash/current/plugins-filters-aggregate.html However, logstash enables receiving remote logdata via HTTP. ADE would be the closer answer.
For me the switable answer seems to be: ADE
a is not, you need filebeat, a component of elasticsearch, b is a feature so is b, bde
sorry is ADE, correct filebeat is not elk