I've written an HTTP server that outputs access logs to STDOUT. The server is setup as a service using systemd, so all the access logs end up in journald. I'm running the ELK stack on a second server that I would like to use to analyze the logs. How can I go about getting the journald logs from server A and into Logstash on server B? I've been reading about Filebeat but it seems that it won't work with journald?
magnusbaeck (Magnus Bäck) #2
Aren't these logs written to disk at some point?
system (system) #3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.