Hi, I have installed into a machine logstash, the problem here is that i want a tcp and udp plugin to take everithing at port 5.000.
I'ts better if I use rsyslog for this or the logtash tcp/udp plugins will be fine for this??
Thanks MrNerd
You can have a single Logstash instance that listens to both 5000/tcp and 5000/udp, yes.
Thanks for your soon reply @magnusbaeck, and one more question, while logstash listens on those ports its possible to add or delete some lines of the packets im receiving?
Yes, that's possible.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.