Processing gzipped Log Files with Elastic Agent Custom Log Integration?


I have an Elastic Cloud environment set up and I'm trying to ingest and parse a number of gzipped log files from a pair of central log repository servers. The Elastic Agent is already installed and communicating without issues. I've tried using the Custom Log integration and I can pull over other log files from specified directories without issue. However, the gzipped data just shows up as a mess of Unicode characters since nothing is currently configured to process it.

I've looked into Ingest Node Pipelines and Logstash Pipelines, but neither seems like it will do exactly what I need here with the Elastic Agent. Is unzipping and ingesting this data currently supported through the Elastic Agent somehow, or do I need to pursue another route to make this work?

Thank you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.