I've the following configurations in my environment:
filebeat --> redis <-- FW -- ELK
on the frontend servers (where I've installed the filebeat module) I need to install something that act as the logstash-input-http module and then sends to redis, in order that logstash can pull the logs to itself.
something that waits for new log or files (could be also different protocols, and then once received the file sends to redis as we currently do for our tomcat logs.
thank you very much