Is there a standard way to test a Beats input (like say, Graylog or Logstash) to make sure that an installation or configuration is working as expected?
I would think that tcpreplay with a known-good pcap of Filebeat or Packetbeat would be a possible approach.
Do reference pcaps exist? Or can you pipe some reference data thru netcat pointed at the logstash listener? Ideas?