Shipping Postfix logs to ELK stack

Elastic Stack Beats
1

Hello,

Well this is not actually an issue rather query. I have been playing with ELK stack for a few days. I have a working ELK stack running on Ubuntu 20.4. Now, I want to ship mail logs (postfix logs) to my ELK stack. Is there any way to do that?

ELK server: Ubuntu 20.4
Elasticsearch: 7.15
Logstash: 7.15
Kibana: 7.15

Best regards,
Do Duyen

2

Welcome to our community! :smiley:

Generally this is done with Filebeat and an ingest pipeline. Something like GitHub - inqueue/postfix-ecs-pipeline: An Elasticsearch ingest node pipeline for Postfix would do what you want.

3

thanks you very much!!