I want to send the Cisco switch logs to ELK stack? Is below procedure correct ?
Sentd logs from Cisco switch to Rsyslog server
Install filebeat on Rsyslog server
Step-3: enable Filbeat Cisco module
Step-4: create Filebeat CIsco piplines
Step-4: send logs from filebeat to Logstash
Please correct me if i am wrong. If is there any another process please let me know.