[syslog-ng] Syslog-ng input for beats ?

[Fabien Wernli]

Hi,

On Mon, May 15, 2017 at 11:45:46PM -0400, Scot wrote:
> I tried reading the mapping documentation in the Balabit Latest docs but
> I'm not connecting these dots, sorry.
> 
> Can I use the templates for creating the ES index as a reference for json
> mapping in syslog-ng ?

syslog-ng does not manage ES templates.
You must add those manually using the ES REST interface:

curl -XPOST 0:9200/_template/mytemplate -d@/tmp/mytemplate.json