I configured two EC2 instance. In one instance I have Logstash and from other instance I want to send audit logs to Logstash.
I am using SYSLOG input plugin to collect the events.
input {
syslog {
port => 5514
}
}
# The filter part of this file is commented out to indicate that it is
# optional.
# filter {
#
# }
output {
stdout { codec => rubydebug }
}
But I am not getting any Events. How could I achieve this.?