LoginSign Up
← Back to all sparks
Logstash logo

Logstash

INFRA · APISANALYTICS
Velocity3.3

Data processing pipeline for Elasticsearch

www.elastic.co/logstash ↗

PQ compression and ES|QL preview land while weekly plugin churn drives the release cadence.

observabilityelastic-stackingest-pipelineperformanceplugin-ecosystemsecurity-hardening
◆Current state
Logstash is in a steady maintenance phase across the 9.0–9.3 lines, with most weekly releases dominated by plugin dependency bumps (Netty, Avro, kotlin-stdlib) and small fixes. The substantive 9.x work — Persistent Queue compression via ZSTD, batch-size metrics, and ES|QL support in Technical Preview for the Elasticsearch input/filter — represents real capability gains for operators tuning throughput and storage. Security and credential-handling hygiene (sasl_jaas_config redaction, encoded API-key formats) shows up consistently across plugin updates.
◆Where it's heading
The product is consolidating its role as the configurable ingest tier of the Elastic stack rather than chasing new categories. Investment is concentrated on operational efficiency — PQ compression, average batch metrics, JDBC concurrency lifts — and on tightening integration with newer Elasticsearch capabilities like ES|QL. Plugin maintenance burden is high but treated as first-class, suggesting the team has accepted the long tail of integrations as the durable surface area.
◆Prediction
Expect ES|QL support to graduate from Technical Preview to GA in the next minor, and PQ compression to become the default once the rollback-barrier risk has aged out. Watch for further telemetry surfaces aimed at sizing — the batch-metrics work points toward a guided-tuning story.

◆Recent moves

  1. 2mo ago

    Release notes index update (no shipped change)

    Generic release-notes preamble republished as a feed entry, with no shipped change attached. Boilerplate that surfaces because the changelog page itself was re-crawled.

  2. 2mo ago

    Kafka Output regression fixed for sasl_jaas_config

    A Kafka Output regression that broke sasl_jaas_config configuration in 11.8.5 is fixed. Important for any operator running Kafka with SASL who upgraded onto the regression — restores a security-relevant config path.

  3. 2mo ago

    Security advisories pointer for 9.3.3

    Pointer to the Elastic stack security-announcements forum, with a 9.3.3 plugin-list header. No user-visible change in this entry itself.

    View source ↗
  4. 2mo ago

    Elasticsearch Output - 12.1.3

    Elasticsearch Output 12.1.3 improves logging when the Dead Letter Queue is in use, making failed-document workflows easier to diagnose. Small but meaningful for operators who rely on DLQ to keep ingest pipelines unstuck.

  5. 2mo ago

    Logstash seizes 9.x: PQ compression, batch metrics, ES|QL preview

    ⚡ SPARK

    Consolidated 9.x release notes covering 9.0 through 9.3.2 — the first run capturing the headline 9.x features. Persistent Queue ZSTD compression, average batch-size metrics, ES|QL Technical Preview, and JDBC concurrency lifts together reshape what operators can tune.

    View source ↗
  6. 2mo ago

    Azure_event_hubs Input - 1.5.5

    Routine kotlin-stdlib dependency bump in the Azure Event Hubs input. No behavioral change for users, but keeps the plugin off transitively-vulnerable versions.