Logstash parsing remote files from filebeat

Hello logstashers!

I was wondering if it is possible to read remote files like PDF, docx and import them into elasticsearch using the attachment processor + filebeat, where filebeat would send files to logstash, then logstash insert the base64 encoded data of the files in elasticsearch.

My idea was to install filebeat in all my workstation and then send all *.pdf files to elastic to find PII information in the network.

Any thoughts if this is possible?

Cheers!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.