I have multiple machines running filebeat and a logstash host in my cloud environment.
To minimize firewall impact, I created a single VM to be a relay, and forward everything from the other filebeats to the outside world.
For some reason this doesn't work.
Has anyone tried this before?
Here is an example yml setup:
- type: tcp