How to Read logs from Solaris 11.3 SPARC and push to logstash on rhel

Elastic Stack Logstash
1

Hey,

Any alternative to Filebeat which helps in reading application / database logs from Solaris server (Solaris 11.3 SPARC) and push it to my logstash on my rhel ?

P.s filebeat is not supported in Solaris SPARC systems.

2

First off all, build centralized syslog server in Linux that will received the syslog from Solaris.
Put the application/database log into the syslog facility, then setup the syslog to forward the log to the centralized syslog that you already created.
Next, in centralized syslog, install the filebeat and read the logs that you interested.
You can install centralized syslog as follow:
https://www.tecmint.com/create-centralized-log-server-with-rsyslog-in-centos-7/

Regards,
Fadjar Tandabawana

3

@fadjar340 thanks for your response.

Other than syslog, any other things ?

Because I'm finding difficulties in parsing multi line messages via syslog.

4

Please read this:

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.