Winlogbeat to syslog

Elastic Stack Beats
1

Hi,

Is it possible to send windows event logs with winlogbeats direct to logstash syslog service (or other syslog servers udp/tcp 514)?
I can't find how to specifiy the server hostname/ip. Only how to enable logging syslog.

https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-logging.html
logging.to_syslog: true

Thanks in advance!

2

You send the data directly to Logstash using the Logstash output. But you cannot send the output via syslog. Beats support outputting to Elasticsearch, Logtash, Kafka, and Redis.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.