Winlog config

Elastic Stack Beats
1

hello
I have the following config for my network :

Winlogbeats =======>Logstash====> Redis=====>logstash ======>Client node======> Cluster of elasticsearch

now I want to create cluster for my Logstash inputs and redis and I need to config this part of winlogbeat from the follow :

output.logstash:
  hosts: ["127.0.0.1:5044"]

to

output.logstash:
  hosts: ["DNS address ex: domainname.com  "]

please help me in this parts

thanks

2

I don't understand what the question is. Please clarify.

BTW, Winlogbeat supports outputting directly to Redis. So you could skip the first instance of Logstash. https://www.elastic.co/guide/en/beats/winlogbeat/current/redis-output.html

output.redis:
  hosts: ["localhost"]
  password: "my_password"
  key: "winlogbeat"
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.