Hello, I new with elastic. I wnat to send data from nginx server to audit access usage. Searching in google I saw a way to send data in json format using nginx json formater. From nginex I send messagesto local rsyslog, and from local rsyslog to remote rsyslog (where logstash is installed), from remote rsyslog I send msg to logstash. First time I received an error about the format. But I finally solved this error by removing all not json parts of the message in rsyslog with a rsyslog template in configuration:
local6.info /tmp/auditoria.log; onlyMsg
As you can see the I send logs to a local file system (/tmp/auditoria.log) in order to verify the result and I can see that is a well formed json message.
Once I put this template I can see no more errors in logstash, and I can see how logsthash connect to elastic on port 9200 when I write logs on nginx but I can not anything in elastic logs and I can not see anithing in kibana. I dont know if i missing something or if I am not using kibana properly.
I appreciate for help anyone.