hi , i trying send logs of the ossec agent to logstash
directly, my question is ,¿ is necessary the server ossec for send logs ? , and is possible send logs directly ossec agent to logstashg without install server ossec.
Probably. ossec appears to be syslog formatted data over udp. I suggest you try pointing an ossec agent at a udp input and let us know how it goes.