We have a three tier network infrastructure (DMZ1, DMZ2 and LAN) where connections are only allowed between adjacent tiers.
We have metricbeat deployed on all tiers and Elasticsearch resides in LAN. Events from DMZ1 are relayed through DMZ2 Logstash installation to LAN using Lumberjack.
The question is: is there a lumberjack type of relay protocol for X-pack monitoring? That would allow us to pipe monitoring data from DMZ1 to LAN. Are there other alternatives?