F5 log to logstash via Redis

Elastic Stack Logstash
1

The network F5 team export the log via syslog protocol to logstash. I provide the port with below, and get the logs successfully.

input {
  syslog {
    type => syslog
    port => 5514
  }
}

But I want to export the F5 log to redis server first then from Redis to logstash, what do I need adjust? I can't install any third party softwares on F5 (virtual F5), such as logstash-forwarder, logstash shipper, etc.

2

You need to add an output to Redis, then another instance of LS with a redis input and then an ES output.
Basically you're just splitting things up.

1 Like
3

Thanks, @warkolm, will take a try and back to you later.