Can packetbeat store data locally if the logstash server is unavailable?

Question

linux

There is a laptop that acts as a small multifunctional server. I want to set up its monitoring using elk, but I can’t put it on the laptop itself, because. there are not enough resources. I'm thinking about the option to put elk on a stationary device, and put packetbeat on a laptop and set up sending, but the fact is that my stationary device is not always turned on. Will packetbeat accumulate information until the server is available locally?
As far as I understand with filebeat, it simply sends the file itself to logstash, i.e. data and so remain in the log file.

Answer 1

Packetbeat
Filebeat's internal queue does not send files, but indexes the last lines sent by it, and when the connection with logstash/restart is broken, it will send relative to its index. If a file was rotated while filebeat was disabled, index discrepancies can have different consequences.