search

philhagen / sof-elk

Configuration files for the SOF-ELK VM
GNU General Public License v3.0
1.47k stars 276 forks source link

identify supported configuration for remote `filebeat` log shipping #327

Open philhagen opened 5 months ago

philhagen commented 5 months ago

esp for syslog, it seems there is a vastly different parsing being applied to filebeat-shipped sources than by syslog alone. need to dig in and see what the "supported" configuration would be.

Some detail on this is covered in #325 .