I'm receiving several type of log over syslog, some of them are customed, json, cef,.. other syslog.
I've noticed there is no built in cef filter, like the json one.
I found this one:
Why it's not included into logstash natively ?
I know I could youse the codec on the input, but that would imply to create a new input for every format (codec supported), I have.
Or how can i do ?
Regards,