Input/Output Plugin

Elastic Stack Logstash
1

Hi, I have installed into a machine logstash, the problem here is that i want a tcp and udp plugin to take everithing at port 5.000.
I'ts better if I use rsyslog for this or the logtash tcp/udp plugins will be fine for this??

Thanks MrNerd

2

You can have a single Logstash instance that listens to both 5000/tcp and 5000/udp, yes.

3

Thanks for your soon reply @magnusbaeck, and one more question, while logstash listens on those ports its possible to add or delete some lines of the packets im receiving?

4

Yes, that's possible.