I need to deploy agent less deployment version of ELK stack on a basic license.
Basically we want to use IT as a log collector and availability monitoring for Windows/Centos/RedHat servers as well as gather information such as CPU, MEM, DISK usage. Also, we want to monitor network devices. Mostly just availability.
I know that logstash has WMI and SNMP capabilities. I have a few questions about this approach.
1.) Is there documented anywhere this kind of approach?
2.) How should I gather used resource information for Windows and Linux?
3.) Would It be very costly to gather information via logstash send it to filebeat module to parse the information then send it back to logstash to drop all not parse the message and finally send it to elasticsearch(all on the same machine)?