So this is what it should look like?
filebeat.inputs:
# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.
- type: syslog
protocol.udp:
host: "0.0.0.0:9000"
# Change to true to enable this input configuration.
enabled: true
I took out the local path for now just trying to get the rest of the syslog working.