Where does Beats send the data?

Question

I have a theoretical question about Beats.

If I understand correctly, Logstach allows to easily parse the received data and ingest it to ElasticSearch. So my question is, does Beats send the retrieved information directly to a Logstach profile or does Beats itself modify the data and ingest it directly into ElasticSearch?

Thanks in advance for your help

EDIT :

Important message

To summarize, when I configure Filebeat, I only fill in the information from Elastic Cloud as output. That is to say the cloud ID and the password of elasticsearch. So I don't fill in any output information. My question is, when I use a module (Fortinet for example), will Filebeat process the information and send it directly to ElasticSearch or will it send it to Logstach by default? I need to try to understand as much as possible to write a paper on this.

Answer 1

You can have both the option, you can send the data from beats to directly Elasticsearch or send it to logstash where again in logstash configuration you can mention which Elasticsearch it needs to send the data.

Refer configure the output page for more details and configurations ie Elasticsearch, kafka, redis, console etc.