Wrong data in Elasticsearch

Elastic Stack Elasticsearch
1

I have installed elk on linux server and winlogbeat on windows.I am using syslog input plugin but i
don't know why it is showing me winlogbeat data

Screenshot 2020-09-17 113219
Screenshot 2020-09-17 1132191542×883 103 KB

input {
syslog {
port => 10514
host => "10.198.0.133"
}
}
output {

elasticsearch {
  hosts => "elasticsearch:9200"
  manage_template => false
  index => "syslog-%{+YYYY.MM.dd}"
  }
}

i've two server of linux one is client and other one is server i am sending client logs to server through syslog but it is showing me winlogbeat data

2

What is the output from a request to _cat/indices/syslog*?v?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.