Method to collect all logs

[gsronald (Ronald Ng)]

To all dear gens,

I would like to ask how to collect all logs such as syslog, ad audit logs, web logs, etc...

I would like to compete with Splunk.

Please advise.

[magnusbaeck (Magnus Bäck)]

This question is too open-ended to answer in a meaningful way. If you ask a more specific question you'll get more specific answers.

The general flow is: Pick a log type. Write Logstash filters (and input/output configurations) that satisfies your wishes. Continue with the next log type.

[warkolm (Mark Walkom)]

@magnusbaeck

The general flow is: Pick a log type. Write Logstash filters (and input/output configurations) that satisfies your wishes. Continue with the next log type.

Then store in ES and view with Kibana