Ship logs from appliances in form of syslog

Elastic Stack Logstash
1

Hi,

I am running ELK stack on a Windows box. We got a couple of load balancers appliances and they have the option to export logs in syslog format.

How can I configure my Elasticsearch or Logstash to receive them? Do I need filters too? Please, suggest the configuration settings.

2

You can use the syslog input for that - https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html

As for filters, that's hard to say without more info.

3

Thanks Warkolm,

What if I want to tag the incoming syslog data on specific port?

4

Use the add_fields directive.

5

See https://www.elastic.co/guide/en/logstash/current/config-examples.html.