I was trying to use nxlog to transfer logs from windows events logs to kibana but that didnt work. Now im trying to use SNMPTRAPS but it still won't work. Any ideas?!
logstash.conf:
input {
tcp {
codec => json_lines { charset => CP1252 }
port => "9200"
tags => [ "9200" ]
}
snmptrap {
type => "snmptrap"
port => 162
host => http://IIS_SERVER
community => "public"
}
}
filter {
date {
locale => "en"
timezone => "Etc/GMT"
match => [ "EventTime", "YYYY-MM-dd HH:mm:ss" ]
}
}
output {
elasticsearch {
host => http://IIS_SERVER:9200
}
}