Hello guys, I'm currently configuring my ELK cluster to receive syslog from ESXi and Winlogbeats events from Windows. On input file, i got: input { udp { port => 3514 type => "syslog" } beats { port => 5044 type => "wineventlog" } } And output file: output { if [type] …

Syslog + Beats

magnusbaeck (Magnus Bäck) March 1, 2016, 9:17pm 5

Do I have to configure the "type" in the input?

Yes, that'a a good idea nevertheless.

Topic		Replies	Views
How to handle multiple beats in Logstash Logstash	4	420	June 1, 2018
Winlogbeat via Logstash into Elasticsearch Logstash	18	7776	July 22, 2017
Winlogbeat being ingested in both winlog-* and syslog-* Logstash	3	428	July 30, 2018
Replace rsyslog with Filebeat? Beats	2	523	November 19, 2019
Sending data from same source for different type of beat agents to logstash Logstash	22	2348	September 25, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Syslog + Beats

Related topics