Hello, Looking to use logstash to host multiple syslog listeners to start to aggregate logs from different vendors and then forward on for now to another syslog server. The question is whether we can set the syslog output dependant on the source address for example: TCP 514 collects all firewalls…

Logstash conditional output

warkolm (Mark Walkom) February 22, 2021, 12:54am 7

How to create multiple indexs with multiple input in logstash - #4 by Badger is a great example of how to do this.

Topic		Replies	Views
Logstash - Syslog input and output Logstash	1	402	February 27, 2018
How to send syslog to multiple destinations? Logstash	1	487	March 5, 2021
Rsyslog to logstash help Logstash	4	1366	December 17, 2017
Logstash parsing syslog to different indices depending on source hosts Logstash	6	5285	August 8, 2017
Distinguish between syslog inputs Logstash	5	2590	May 25, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash conditional output

Related topics