[syslog-ng] logstash to syslog-ng

Czanik, Péter peter.czanik at balabit.com
Tue Nov 7 17:52:58 UTC 2017


Hi,

In the past couple of weeks I run into a few places, where there was an
existing filebeat -> logstash installation, and they wanted to forward logs
from logstash to syslog-ng. If you want to use your regular syslog-ng
filters, patterndb parsers, whatever, the easiest is if you turn back the
message messed up by Logstash into the original one.

Bye,

Peter Czanik (CzP) <peter.czanik at balabit.com>
Balabit / syslog-ng upstream
https://www.balabit.com/blog/author/peterczanik/
https://twitter.com/PCzanik

On Tue, Nov 7, 2017 at 6:22 PM, Scot <scotrn at gmail.com> wrote:

> What is the use case for converting json to syslog when syslog-ng supports
> a json input ?
>
>
> On Thu, Nov 2, 2017 at 8:49 AM, Czanik, Péter <peter.czanik at balabit.com>
> wrote:
>
>> Hi,
>>
>> In the past few weeks I have seen questions about sending logs from
>> Logstash to syslog-ng, so I tried it myself and put together a blog with
>> simple configurations to help you:
>>
>> https://www.balabit.com/blog/sending-logs-logstash-syslog-ng/
>>
>> Bye,
>>
>> Peter Czanik (CzP) <peter.czanik at balabit.com>
>> Balabit / syslog-ng upstream
>> https://www.balabit.com/blog/author/peterczanik/
>> https://twitter.com/PCzanik
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20171107/33fb748f/attachment-0001.html>


More information about the syslog-ng mailing list