Logstash - Arcsight integration

Elastic Stack Logstash
1

Hi everybody

I activated the Arcsight module and created a pipeline for the configurations already active in logstash (in my case I receive data from the Beats). When I activate Arcsight the pipeline with the Beats doesn't work and Arcsight doesn't work either, if I comment Arcsight the Beats pipeline works.

Is it possible that Arcsight is configured incorrectly?
Can Arcsight coexist with other Logstash pipelines?
Does Arcsight work with a dedicated pipeline?

Thanks

Daniele

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.