Logstash is the data collection pipeline tool through which input is taken from different sources and output to different data sources. The data is cleansed through filter options and transformed before sending it to Elasticsearch. Logstash has different adapters to handle different applications, and it normalizes the data into different destinations. Processing in Logstash is organized into one or more pipelines.
Figure 5. Logstash
These pipelines receive data and place it in internal queue. The processing threads then use filter plugins, and once the data is processed its send to the output plug-in.