filebeat send syslog to logstash
root@ip-10-12-2-64:~# cat /etc/filebeat/filebeat.yml
filebeat.prospectors:
- input_type: log
paths:
- /var/log/*.log
input_type: log
document_type: syslog
registry: /var/lib/filebeat/registry
output.elasticsearch:
hosts: ["https://ec18487882735hd08009d3:[email protected]:32563"]
protocol: "https"
username: "ec18487808b87359124d3"
password: "wetihnsdt453"