Sending multiple logs to same ingestion VM with (elastic agent installed in it) and send them to elasticsearch cluster?

Elastic Stack Elastic Agent
1

hello everyone !

i need guidance please
i want to use an ingestion vm 192.168.1.124 (ubuntu server with elastic agent installed in it and enrolled in fleet) to receive logs from a lot of servers and components in my infra like fortigate, sophos, cyberarc ... using the same port 514 (192.168.1.124:514) and then the elastic agent sends those logs to elasticsearch so I can visualize them in kibana using elastic agent's integrations
is this approach possible ?
if yes how can I achieve it ?
or should I use logstash instead ?
thank you

2

Not using the same port, each integration will need a different port.

2 Likes
3

Hello Leandro

Thank you for taking the time to answer,

so it's only possible if the servers send logs to my ingestion server 192.168.1.124 but using different ports and same thing for elastic agent integrations each one should use different port in their configuration ?

please confirm

thank you !