Nagios LS confguration - This accepts events:
tcp {
type => 'syslog'
tags => 'filebeat'
port => 2070
}
When the events come in, they are in the beats format which looks like this, which I think is filebeats format:
message:
2F4PF\aM\xC3I#\f\x9A0\xD6B\xAFE\x95\xF8u\xBC\xBA\x8A\u0017\e\u001Co\x9A\xF4+\xD1\u0011\xB5\xF8d&BȲ\r\xE6\u0018\xAA\x83\u007F\xA8\xB7\"S\x9D\u000Ef\u000F\xA2S\xFD0\xB0\xA6\xE0\xDCU\xF5\xE2F0FE\x8EB\x80*\u00117\xB9v0\u0004\xA4\x9E\xE8\xF6CA\u001D\\ͧ\x9Ekcj\"R\xF8G\x84\xAC\xD7hI\xE1\xA0\xFA\xB2\xA8\x84\u0006\x8F\xD4OU\xE06\xC2\u0012V\u0012\xB8-
This configuration doesnt accept connections, I think I have the format for beats input plugin correct?
Ref: https://www.elastic.co/guide/en/logstas ... ugins.html
beats {
type => 'syslog'
tags => 'filebeat'
port => 2070
}
Does the 'beats' logstash work in NagiosLS?
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: Does the 'beats' logstash work in NagiosLS?
Locking past as you opened a ticket with the same issue