Agents and ingestion tools

Historically, many multiple popular agents and ingestion tools have worked with Elasticsearch OSS, such as Beats, Logstash, Fluentd, FluentBit, and OpenTelemetry. OpenSearch aims to continue to support a broad set of agents and ingestion tools, but not all have been tested or have explicitly added OpenSearch compatibility.

As an intermediate compatibility solution, OpenSearch has a setting that instructs the cluster to return version 7.10.2 rather than its actual version.

If you use clients that include a version check, such as recent versions of Logstash OSS or Filebeat OSS, enable the setting:

PUT _cluster/settings
{
  "persistent": {
    "compatibility": {
      "override_main_response_version": true
    }
  }
}

For a longer term solution, we plan to create an OpenSearch output plugin for Logstash. This plugin does not exist yet, but we’ve included it in the compatibility matrices below based on its expected behavior.

Downloads

These versions of Logstash and Beats offer the best compatibility with OpenSearch. For more information, see the compatibility matrices.

• Logstash OSS 7.12.1
• Filebeat OSS 7.12.1
• Metricbeat OSS 7.12.1
• Packetbeat OSS 7.12.1
• Heartbeat OSS 7.12.1
• Winlogbeat OSS 7.12.1
• Auditbeat OSS 7.12.1

Compatibility Matrices

Italicized cells are untested, but indicate what a value theoretically should be based on existing information.

Compatibility Matrix for Logstash

* Most current compatible version with Elasticsearch OSS.

** Planning to build.

Compatibility Matrix for Beats

* Most current compatible version with Elasticsearch OSS.

** Beats OSS includes all Apache 2.0 Beats agents (i.e. Filebeat, Metricbeat, Auditbeat, Heartbeat, Winlogbeat, Packetbeat).