This is a cache of https://www.elastic.co/guide/en/ingest/8.19/agent-ls-airgapped.html. It is a snapshot of the page as it appeared on 2025-11-23T02:55:41.582+0000.
Elastic Agent to Logstash: Air-gapped environment | Elastic Ingest Reference Architectures [8.19] | Elastic
« Elastic Agent to elasticsearch: Air-gapped environment
Elastic Docs ›Elastic Ingest Reference Architectures [8.19] ›Elastic air-gapped architectures

Elastic Agent to Logstash: Air-gapped environment

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Elastic Agent to Logstash: Air-gapped environment

edit
Image showing Elastic Agent
Ingest model

All Elastic Stack components deployed inside a DMZ:

  • Control path: Elastic Agent to Fleet to elasticsearch
  • Data path: Elastic Agent to elasticsearch
Use when
Your self-managed Elastic Stack deployment has no access to outside networks

Resources

edit

Info for air-gapped environments:

Geoip database management in air-gapped environments

edit

The Logstash geoip filter requires regular database updates to remain up-to-date with the latest information. If you are using the Logstash geoip filter plugin in an air-gapped environment, you can manage updates through a proxy, a custom endpoint, or manually. Check out Manage your own database updates for more info.

« Elastic Agent to elasticsearch: Air-gapped environment