Hello,
I have multiple machines running filebeat and a logstash host in my cloud environment.
To minimize firewall impact, I created a single VM to be a relay, and forward everything from the other filebeats to the outside world.
For some reason this doesn't work.
Has anyone tried this before?
Here is an example yml setup:
filebeat.inputs:
- type: tcp
host: "localhost:{{inbound-port}}"
output.logstash:
enabled: true
hosts: ["my_logstash_host:9999"]
ssl:
verification_mode: "none"
Similar past post (locked):
Thanks in advance!
JD