Where are the logs stored?

Elastic Stack Elasticsearch
1

Hi there,

I'm currently setting up the ELK suite with pfSense. I will use the pfSense UI to redirect the log to the server where ELK will be installed. My question is, where will the raw logs of pfSense will be stored? I need to keep them somewhere but I don't know what will happen to them if I send them in the server through the Logstash port.

2

Once an event hits LS it is altered, we add things like the timestamp and change it to json (by default).
So neither LS or ES store the raw logs.

3

Is there a way to store the logs and then send the to Logstash?

4

Most likely, I don't know what that would look like as I don't know how pfsense logs.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.