0

I would like to have ephemeral ec2 instances push logs to a central flat-file store for archiving and manual perusing, as well has have that data pushed to elastic search.

Is there a single agent that can tail local log files and both push them to a central flat-file store as well as push them to elastic search?

Improve this question
1
  • What kind of logs are we talking? Plain syslog?
    – mschuett
    Jul 28, 2015 at 6:18

1 Answer 1

Reset to default
0

This sounds like a job for.. Logstash!!!

But seriously though, install Logstash on your central logging server, and push the logs there with Logstash-Forwarder, using the Lumberjack protocol.

In Logstash, you can setup multiple outputs, which can be Elastic and local flat files with whatever format you want.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .