Hello ,
I am receiving different type of logs eg. cisco ise logs , pfsense logs, epp logs at single server via syslog-ng at same port 514 . I have set up elastic agent at this VM to integration and receiving logs , but all logs are recevied at same pipeline eg. ise pipeline . since Other logs are different kind of so they are not parsed. How to resolve this issue ? Is there any filter in elastic agent configuration so we can receive logs at different integration and respective ingest pipeline ?
There is a new integration that is Syslog Router integration that is made for this specific purpose... perhaps take a look at that