I've written an HTTP server that outputs access logs to STDOUT. The server is setup as a service using systemd, so all the access logs end up in journald. I'm running the ELK stack on a second server that I would like to use to analyze the logs. How can I go about getting the journald logs from server A and into Logstash on server B? I've been reading about Filebeat but it seems that it won't work with journald?
Aren't these logs written to disk at some point?