Dear all,
I have a network device and would like to send syslog to logstash. My current logstash.json as below. May i know how to amended. I tried on. Please correct me if I wrong. Thanks
logstash.json (before)
input {
beats {
port => 5044
type => "log"
}
}
output {
elasticsearch {
hosts => "localhost:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
logstash.json (after)
input {
beats {
port => 5044
type => "log"
}
syslog{
port => 514
type => "syslog"
}
}
output {
elasticsearch {
hosts => "localhost:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}