F5 log to logstash via Redis

(Bill) #1

The network F5 team export the log via syslog protocol to logstash. I provide the port with below, and get the logs successfully.

input {
  syslog {
    type => syslog
    port => 5514

But I want to export the F5 log to redis server first then from Redis to logstash, what do I need adjust? I can't install any third party softwares on F5 (virtual F5), such as logstash-forwarder, logstash shipper, etc.

(Mark Walkom) #2

You need to add an output to Redis, then another instance of LS with a redis input and then an ES output.
Basically you're just splitting things up.

(Bill) #3

Thanks, @warkolm, will take a try and back to you later.

(system) #4