Syslog enquiry

Dear all,

I have a network device and would like to send syslog to logstash. My current logstash.json as below. May i know how to amended. I tried on. Please correct me if I wrong. Thanks

logstash.json (before)

input {
beats {
port => 5044
type => "log"
}
}

output {
elasticsearch {
hosts => "localhost:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

logstash.json (after)

input {
beats {
port => 5044
type => "log"
}
syslog{
port => 514
type => "syslog"
}
}

output {
elasticsearch {
hosts => "localhost:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

What exactly are you asking here, as it's not clear.

I want to know if i want to receive syslog from network device. What should I need to do in logstash.json

Check out https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.