Try our new research platform with insights from 80,000+ expert users
Logstash Logo

Logstash Reviews

Vendor: Elastic
4.7 out of 5
Start review

What is Logstash?

Logstash is a versatile data processing pipeline that ingests data from multiple sources, transforms it, and sends it to preferred destinations, enabling seamless data utilization across systems.

Get the Log Management Buyer's Guide and find out what your peers are saying about Logstash, Wazuh, Grafana Loki and more!
Logstash is the #28 ranked solution in Log Management Software. PeerSpot users give Logstash an average rating of 9.4 out of 10. Logstash is most commonly compared to Wazuh: Logstash vs Wazuh. Logstash is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 17% of all views.
Buyer's Guide
Log Management
May 2025
Get the category report
Helped 859,129 peers since 2012

Featured Logstash reviews

Read more reviews

Logstash mindshare

As of June 2025, the mindshare of Logstash in the Log Management category stands at 0.6%, up from 0.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
Log Management
 
 
Key learnings from peers

Valuable Features

Logstash offers significant features, including log collection from varied sources, including hardware. Organizations use it for its high availability, special functions, and versatility with numerous plugins allowing inputs and outputs. It smoothly integrates with other ecosystems, operating as a proxy in air-gapped environments. It processes logs using configuration files with input, filter, and output parts. Users control data transfer fields to Elastic, benefiting teams with real-time insights and performance reports.
  • "The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."
  • "Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."
  • "Everything aligns well with improving our organization."

Room for Improvement

Logstash faces challenges with compatibility and demands a strong programming background due to the lack of a graphical interface, complicating use for business teams reliant on skilled experts. Altering pipelines is tough, requiring programming over drag-and-drop functionality. The necessity to create lengthy ingest pipelines each time is troublesome. Integration of automation tools is essential as it does not inherently automate actions. Enhancing with clustering for multi-node existence is suggested.
  • "An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."
  • "Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."
  • "Almost all the research can be very bad. We still have a problem with importing the log system."

Popular Use Cases

Logstash is primarily utilized for connecting logs from hardware and correlating logs from various sources. Users implement Logstash for transforming and integrating logs, aiding operational teams in investigating issues and management in extracting reports. Several servers ensure high availability, with Filebeat agents forwarding logs for efficient management. Users in the Middle East, regarded as Elastic Observability experts, integrate Logstash with various systems, addressing log transformation and enhancing data analysis capabilities.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our Log Management Buyer's Guide for additional reliable information.

Top industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
12%
Government
10%
University
6%
Educational Organization
5%
Insurance Company
5%
Manufacturing Company
5%
Media Company
5%
Retailer
4%
Energy/Utilities Company
4%
Non Profit
3%
Wholesaler/Distributor
3%
Healthcare Company
3%
Real Estate/Law Firm
3%
Hospitality Company
2%
Legal Firm
1%
Comms Service Provider
1%
Transportation Company
1%
Outsourcing Company
1%
Performing Arts
1%
Construction Company
1%
Aerospace/Defense Firm
1%
Logistics Company
1%
Consumer Goods Company
1%
Cloud Solution Provider
1%
Non Tech Company
1%

Compare Logstash with alternative products

Go!

Learn more about Logstash

Logstash provides an efficient and flexible way to manage data flow, supporting diverse input sources and offering a rich set of plugins. Its real-time processing capability and ease of integration with Elasticsearch make it advantageous for businesses looking to enhance data analytics. While valuable, Logstash can benefit from improvements like scalability enhancements and more robust error-handling mechanisms.

What are the key features of Logstash?
  • Input Plugin Support: Connects to a wide range of data sources for seamless ingestion.
  • Filter Plugin: Processes and enriches logs before output.
  • Output Plugin Flexibility: Delivers data to various endpoints efficiently.
  • Real-Time Pipeline: Processes data in real-time for immediate insights.
What benefits does Logstash provide?
  • Enhanced Data Processing: Streamlines data ingestion and transformation workflows.
  • Improved Analytics: Facilitates deeper insights through seamless Elasticsearch integration.
  • Cost Efficiency: Reduces total expenses by optimizing data handling processes.
  • Scalability: Adapts to diverse data volumes and use cases.

Industries like finance and e-commerce leverage Logstash for managing extensive log data and improving decision-making by feeding enriched data into analytics platforms. Its ability to handle diverse formats and integrate with Elastic Stack has proven crucial in implementing comprehensive data strategies.

Related questions

  • 30
When evaluating Log Management tools and software, what aspect do you think is the most important to look for?
  • 2,070
Datadog vs ELK: which one is good in terms of performance, cost and efficiency?
  • 51
Which Windows event log monitoring tool do you recommend?
  • 109
What is the difference between log management and SIEM?
  • 39
Splunk vs. Elastic Stack
  • 20
How can Cloudtrail logs be used effectively to improve log monitoring?
  • 261
Why hot data and cold data differences in SIEM solutions are not discussed sufficiently?
  • 127
When evaluating Log Management solutions, what aspect do you think is the most important to look for?
  • 15
When evaluating Log Management solutions, what aspects do you think are the most important to look for?
  • 16
Why are Log Management tools important for companies?

Product Categories

Product Categories
Log Management

Popular Comparisons

Popular Comparisons
Wazuh vs Logstash Logo
Wazuh vs Logstash
Grafana Loki vs Logstash Logo
Grafana Loki vs Logstash
Graylog vs Logstash Logo
Graylog vs Logstash
syslog-ng vs Logstash Logo
syslog-ng vs Logstash
Cribl vs Logstash Logo
Cribl vs Logstash
See all alternatives
 

Logstash reviews

Sort by:
MA
Business Unit Head at Cyber Knight Technologies FZ LLC
Verified user of Logstash
Mar 11, 2025
Exploring resilience and integration capabilities while navigating complexity and technical challenges

Pros

"Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components."

Cons

"Elastic does not provide proper support for Logstash worldwide, and I rate their technical support as one out of ten."

What is our primary use case?

I am considered an expert in Elastic Observability in the Middle East. During my experience, I have worked heavily on Logstash. As the official distributor for Elastic in the Middle East, I have integrated Logstash with various systems.

What is most valuable?

Logstash is a free tool, and Elastic has no plan to commercialize it. Logstash has numerous plugins for inputs and outputs, allowing it to work well in environments that do not contain other Elastic components. It can be resilient, forming a cluster to ensure no data loss with appropriate data queues. Logstash works smoothly with many ecosystems and can integrate with other data sources, even allowing for custom scripting. It plays a significant role as a proxy in air-gapped environments, and it can scale to accommodate increased data influx.
*Disclosure: My company has a business relationship with this vendor other than being a customer: Reseller
Read full review (478 words)
SY
Consultant at SMRJ
Verified user of Logstash
Jan 26, 2025
Product version discussed: 8.0
High availability that aligns well with organizations and offers many valuable features

Pros

" We have three or four Logstash servers for high availability. "

Cons

"We still have a problem with importing the log system. "

What is our primary use case?

We already use the Elasticsearch system. Our system is faster than version seven. Version seven does not have very special functions. We don't have the Elastic Agent. We are now using Beats, and it's not very good for importing data. We must upgrade to version eight. The system is quite large. We have three or four Logstash servers for high availability.

What is most valuable?

Logstash has special functions. We have three or four Logstash servers for high availability. Everything aligns well with improving our organization.

*Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Read full review (395 words)
Buyer's Guide
Download free report
Find out what your peers are saying about Log Management. Updated May 2025
859,129 professionals have used our research since 2012.
PeerSpot user
Senior Application Engineer at a comms service provider with 11-50 employees
Verified user of Logstash
Jun 21, 2025
Transforms logs for real-time insights and seamless reporting

Pros

"The transformation means we ship the logs in the way that we want them to be presented in Kibana, which is the main function we use Logstash for."

Cons

"An enhancement we could implement is the ability to cluster Logstash to exist in more than one node."

What is our primary use case?

A use case for using Logstash that we have involves integration servers that log in files in a non-transformed way. We have more than four servers that log in files, and when we have an issue, we can't determine whether it originated in IS1, IS2, or IS3. To address this, I installed Filebeat, which is the agent that installs in servers that log.

Filebeat sends the logs to Logstash, and the role of Logstash here is taking the logs and transforming these logs in a better way. For example, if we have a request and response, it puts a request field in a separate field, the email and user in a separate field, and the execution time in a separate field. All these separations or transformations of logs help the operation teams investigate issues to determine the root cause and also help management extract reports, insights, and analytics, which aid us in reporting.

What is most valuable?

Logstash is used for transforming logs, and you can use many plugins in Logstash. Logstash works with configuration files that contain three main parts: an input part, a filter part, and an output part. In the input part, we can take logs from many sources such as Beats, files, or Kafka. The filter part is used to filter the logs that are shipped from Beats.

From my understanding and experience with Logstash, it is usually used for processing logic, meaning I can control what fields should be transferred to Elastic and what fields shouldn't be transferred. This is the main function I use Logstash for.

Elastic is a famous open-source searching engine that helps operation teams speed up the investigation process and provides real-time insights for performance reporting.

*Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Read full review (658 words)
Mustafa Husny - PeerSpot user
Senior System Engineer at Techline-eg
Verified user of Logstash
Mar 12, 2024
Helps to collect logs from various data sources, including hardware

Pros

"I can collect logs from various data sources, including hardware. "

Cons

"The product needs to improve its compatibility. "

What is our primary use case?

I use Logstash primarily for connecting logs from hardware. This is the main use case. The second use case involves making correlations between logs from various sources. 

What is most valuable?

I can collect logs from various data sources, including hardware.

*Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Read full review (214 words)