Hi, Im a beginner with ELK and I want to apply different filter on my log.
This is my input file :
type => log
port => 5044
host => 0.0.0.0
With this file, we listen on port 5044, from everywhre, and each log we received on this port will have the log type. Are we ok ?
Now if i receive Apache log on this port, and Syslog too for example, how can I filter filter them. I mean how in the filter I can take only apache log, or only log file ?
And when I used filebeat modules, should I have to create by my self a filter file ?
Sorry for bad english and thank you.