Hi,
Since I am forwarding my incoming logs to storage wondering if I can somehow digitally sign those for future forensic and maintain integrity? Is there any such mechanism available with logstash?
Perhaps the fingerprint filter can help? It can generate a cryptographic hash from all or a subset of the event fields.