BlogsElasticLogstash Production Data Sampling to Pre-production

Logstash Production Data Sampling to Pre-production

Logstash Production Data Sampling to Pre-production

1
posts
2024

This post introduces a method for safely sampling production data into pre-production environments using Logstash and UDP. This approach allows for a subset of production data to be routed to pre-production clusters without risking disruption to the production data flow, offering a lightweight alternative to more complex patterns like the output isolator. It addresses scenarios with resource constraints where full environment separation is impractical. The solution leverages Logstash's pipeline-to-pipeline communication with UDP's fire-and-forget nature, implemented via a Ruby filter for sampling and a UDP output.

2024

Safely sample production data into pre-production environments with Logstash

10/1/2024

Introduces a new Logstash pattern for safely sampling production data into pre-production environments. This pattern utilizes UDP for pipeline-to-pipeline communication, enabling a subset of production events to be sent to a pre-production cluster without blocking the production pipeline. It contrasts this with the output isolator pattern, highlighting reduced operational risks and performance overhead by avoiding persistent queues. The post provides detailed Logstash pipeline configurations for both the production (common) and pre-production pipelines, demonstrating the use of a Ruby filter for sampling and UDP output.