Hello,
I am facing an issue in forwarding logs from logstash to the event hub, below is the conf file. the requirement is to forward winlog beats logs to the event hub.
I am receiving logs in elastic if I kept the format filed as "message" but the logs are not readable, I tried to change the format field to JSON but then I'm not able to receive logs in elastic.
Thanks
input {
beats {
port => 5099
}
}
filter {}
output {
#stdout { codec => rubydebug }
http {
url => "https://namespace.windows.net/eventhub/messages"
content_type => "application/x-www-form-urlencoded"
http_method => "post"
format => "message"
headers => {
"Host" => "namespace.servicebus.windows.net"
"Authorization" => "***********"
}
}
}