Query about logstash

Hi Team,

We have EFK stack running in out k8s cluster. All components are part of cluster. Now we want to implement logstash to create parsing rules for logs. How do I install it in current environment? What should I use for input section since we are using fluent-bit as log collector. I seen many blogs using beats optoin for filebeat, do i need to use anyhing else other than beats for fluentbit agent. Can I add parsing rules using grok plugin to fulentbit configmap file?

input {
beats {
port => 5044
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.