I installed an input plugin today by connecting to the internet and running
/use/share/logstash/bin/logstash-plugin install logstash-input-syslog
But cannot find a conf file to edit...
Is there one? If so where is it? Or does the plugin just tell logstash that if it sees syslog type it knows what to do?
Do I need to create a logstash-input-syslog.conf manually, and stick the port I want to listen on in it?
Am I missing a trick? I read the online stuff about working with plugins but it wasn’t clear to me whether I should be looking for a pre-existing plugin conf file to edit or not?
Sorry for the newbie ignorance but if I’m having to create a conf file and put it in conf.d myself what is the plugin giving me?