Hi there, I have devices which are logging and sending events to logstash in CEF format. Can someone confirm how do I accept messages with those? Does logstash support CEF input plugin? Or is there any other alternative method available?

Accepting messages in CEF format

yaauie (Ry Biesemeyer) March 11, 2018, 9:18pm 2

It looks like logstash-codec-cef may be what you're looking for.

Topic		Replies	Views
Logstash-filter-cef instead of codec Logstash	1	367	June 19, 2019
Beat - logstash - logserver Logstash	5	310	July 30, 2020
How can I export data in CEF format using logstash Logstash	1	390	October 1, 2018
Output CEF Logstash	1	1797	December 25, 2017
CEF codec plugin Logstash	2	662	October 29, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Accepting messages in CEF format

Related topics