Shipping Postfix logs to ELK stack


Well this is not actually an issue rather query. I have been playing with ELK stack for a few days. I have a working ELK stack running on Ubuntu 20.4. Now, I want to ship mail logs (postfix logs) to my ELK stack. Is there any way to do that?

ELK server: Ubuntu 20.4
Elasticsearch: 7.15
Logstash: 7.15
Kibana: 7.15

Best regards,
Do Duyen

Welcome to our community! :smiley:

Generally this is done with Filebeat and an ingest pipeline. Something like GitHub - inqueue/postfix-ecs-pipeline: An Elasticsearch ingest node pipeline for Postfix would do what you want.

thanks you very much!!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.