Hi, Filebeat multiple input

Elastic Stack Beats
1

Hi,

I have filebeat with multiple input and tag, apache_access, apache_error, and modsec.
This have one logstash input

input {
beats {
port => "5044"

EDIT SSL COMM

ssl => true
ssl_certificate => "/etc/ssl/logstash/logstash.crt"
ssl_key => "/etc/ssl/logstash/logstash.key"
ssl_verify_mode => "force_peer"
ssl_certificate_authorities => ["/etc/ssl/logstash/ca.crt"]
tags => [ "beat" ]

}
}

from what i read, modsec must use coded multiline, how do i receive the input with multiple codec ?

Thx

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.