My Newbie questions

Elastic Stack Logstash
1

Hi all

I need an open source solution to allow us to store logs generated by multiple routers, switches and windows servers and workstations.

The logs need to be searchable in the event of a compliance query.

Is this something logstash can do?

With regards to the windows logs, is there a windows component to pipe the event logs in to logstash?

Olly

2

Is this something logstash can do?

Yes, together with Elasticsearch and Kibana. Well, you could use Logstash alone and e.g. store the logs as flat files but things won't be very searchable.

With regards to the windows logs, is there a windows component to pipe the event logs in to logstash?

Yes, Winlogbeat.