I setup a Filebeat (7.9) on my ELK(7.9) and started receiving syslog messages. So far so good, everything is parsed and visualized successfully.
However I am facing problems, when I enable 2 different modules and both are listening for syslog data on the same port - UDP 514? The data cannot be differentiated correctly.
When I modify my module files to listen on different ports, everything is working.
Has anyone run into the same problem?