We are looking to try out some features from the elastic stack which im excited about. We want to start of small though and use existing services at the start before expanding out to (hopefully) use the entire stack.
Right now we would like to use filebeat to forward windows and domino logs into an (incumbent) ubuntu syslog.
Would the process of getting filebeat into syslog be the same as getting them into filestash? just switch the output path of the filebeat to point at syslog instead of what should be filestash?
Would filebeat be able to parse the windows logs before getting into syslog, I read there is a filebeat module that can do parsing? or would we have to go via filestash first?
Thanks for your time and great work on developing this amazing stack!