sequenceDiagram
  participant Host as Linux host
  participant Shipper as Shipper (Fluent Bit/Filebeat)
  participant LS as Logstash (optional)
  participant OS as OpenSearch
  participant OSD as OSD
  Host->>Shipper: Файлы/ journald
  Shipper->>LS: Beats/HTTP (опц. TLS, 5044)
  LS-->>OS: Bulk API (HTTPS 9200)
  Shipper-->>OS: (альтернатива) напрямую по Bulk API
  OS-->>OSD: Поиск/агрегации (Query DSL)
  OSD-->>User: Discover/визуализации/дашборды