Hello, First of all, not trying to start a war ( I promise! ), just want to get some fresh perspective on something.
We have several rsyslog servers where the server is configured to forward logs (received on an IP port) to another rsyslog host, or some other destination. Recently I started getting requests to install filebeat and use filebeat to watch a log file for the purposes of sending to ELK, NiFi, etc. Since we've always used syslog to receive logs and forward, the question I've got is ... why add another tool into the mix? Reading a very little bit, this post on elastic.co: https://discuss.elastic.co/t/filebeat-vs-syslog/50547 I get the impression that filebeat may offer some more reliability; however, I'm not convinced. Wanted to throw the question out as I'm sure someone has considered this situation and may have some thoughts. Thanks! Radesh _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
