I would like to forward logs from Kiwi Syslog Server to Elasticsearch by Logstash.
After configuring both Kiwi log action and Logstash pipeline I see no log in ES side.
If it is a Linux system, the port 514 could be already been used by a local rsyslog server, and even if it is not the case, this is a privileged port, logstash won't be able to bind to that port unless you are running it as root, which is not the case if you are running Logstash as a service.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.