I have a working Logstash server collecting logs from Windows hosts with the nxlog agent (sending json format).
The Logstash server is taking the Windows agent logs and forwarding them to two destinations, and overall it's working fine.
The problem is, one of the destinations (HostA as shown below) does not understand json format, so I would like to have Logstash convert the output for that particular destination to basic Syslog format. I am using the syslog output module, but they are still receiving events in json format and cannot use it.
Any suggestions would be much appreciated.
My configuration is copied below.
NXLOG input from Windows hosts
port => 5140
Output to Legacy log collector
facility => local6
host => "HostA"
port => 514
severity => informational
rfc => rfc5424
Output to new log collector
hosts => "HostB"
port => 9010
ssl_certificate => "/etc/cert.crt"
codec => "json"