I've written an HTTP server that outputs access logs to STDOUT. The server is setup as a service using systemd, so all the access logs end up in journald. I'm running the ELK stack on a second server that I would like to use to analyze the logs. How can I go about getting the journald logs from server A and into Logstash on server B? I've been reading about Filebeat but it seems that it won't work with journald?
Aren't these logs written to disk at some point?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.