Is there no way to use Elastic Agent or Filebeat to accept TCP Syslog messages forwarded from Linux hosts?
Will I need to use something like rsyslog or Logstash to write the files to disk first, then use the system integration?
This seems like an unnecessary step.