[syslog-ng] SYSLOG-NG config issue and suggestion

[Fabien Wernli]

Hi,

On Thu, Dec 07, 2017 at 09:28:15PM +0000, hari ram wrote:
> I have SWITCH1, SWITCH2 ....100
> 
> How can i send logs to elasticsearch, as a ID of switch name and so i can search in Elastic search and make Kibana dashboards

May I suggest you read the excellent documentation [1] ?
The paragraph on Elasticsearch [2] should get you started.

Cheers

--
[1]
https://www.balabit.com/documents/syslog-ng-ose-3.13-guides/en/syslog-ng-ose-guide-admin/html-single/index.html
[2]
https://www.balabit.com/documents/syslog-ng-ose-3.13-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-elasticsearch2