I have filebeat with multiple input and tag, apache_access, apache_error, and modsec.
This have one logstash input
port => "5044"
EDIT SSL COMM
ssl => true ssl_certificate => "/etc/ssl/logstash/logstash.crt" ssl_key => "/etc/ssl/logstash/logstash.key" ssl_verify_mode => "force_peer" ssl_certificate_authorities => ["/etc/ssl/logstash/ca.crt"] tags => [ "beat" ]
from what i read, modsec must use coded multiline, how do i receive the input with multiple codec ?