Hello, Looking to use logstash to host multiple syslog listeners to start to aggregate logs from different vendors and then forward on for now to another syslog server. The question is whether we can set the syslog output dependant on the source address for example: TCP 514 collects all firewalls…

Logstash conditional output

warkolm (Mark Walkom) February 22, 2021, 12:54am 7

How to create multiple indexs with multiple input in logstash - #4 by Badger is a great example of how to do this.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.