I have the module in my logstash.yml.
- name: arcsight
I cannot telnet to localhost 5000, and I do not see it opened in a netstat command. No firewall is running. Anyone see what is wrong here?
There is not a lot of documentation on how plugins work. I assume I don't need input files if the settings are in the logstash.yml.