Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-18 Thread Orion Poplawski
On 7/10/20 3:51 PM, Pete Biggs wrote: On Fri, 2020-07-10 at 16:44 -0400, Jason Edgecombe wrote: I don't use ELK at the moment, but is this helpful? % journalctl -f --output=json The above command prints the continuous output of the systemd journal in json format. Thanks. The problem is

Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Earl Ramirez
> > What do people do to get their syslog messages on CentOS 7 into a > remote ELK stack. I've tried lots of things involving rsyslog, > filebeat, redis, logstash and so on in lots of different > configurations > but nothing really works. I did this a couple times, I will share the configs in

Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs
On Fri, 2020-07-10 at 16:44 -0400, Jason Edgecombe wrote: > I don't use ELK at the moment, but is this helpful? > > % journalctl -f --output=json > > The above command prints the continuous output of the systemd journal in > json format. > Thanks. The problem is getting that into logstash. But

Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs
> > What do people do to get their syslog messages on CentOS 7 into a > > remote ELK stack. I've tried lots of things involving rsyslog, > > filebeat, redis, logstash and so on in lots of different configurations > > but nothing really works. > > > > I can get rsyslog to talk directly to

Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Jason Edgecombe
I don't use ELK at the moment, but is this helpful? % journalctl -f --output=json The above command prints the continuous output of the systemd journal in json format. Jason --- Jason Edgecombe | Linux Administrator UNC

Re: [CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Stephen John Smoogen
On Fri, 10 Jul 2020 at 16:33, Pete Biggs wrote: > > I asked a similar question about a year ago and didn't get any answers. > So I thought I'd try again. > Honestly, as much as I have heard of people using Elastic Kibana.. they are usually using it for things already in JSON. WHen I looked in

[CentOS] CentOS 7 rsyslog and ELK

2020-07-10 Thread Pete Biggs
I asked a similar question about a year ago and didn't get any answers. So I thought I'd try again. What do people do to get their syslog messages on CentOS 7 into a remote ELK stack. I've tried lots of things involving rsyslog, filebeat, redis, logstash and so on in lots of different