homelabsecuritymonitoring/Log_forwarding_introduction.html at main · BoredHackerBlog/homelabsecuritymonitoring · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
<!doctype html>
<html>
<head>
  <meta http-equiv="content-type" content="text/html; charset=utf-8">
  <title>Log forwarding introduction</title>
  <meta name="generator" content="CherryTree">
  <link rel="stylesheet" href="res/styles3.css" type="text/css" />
</head>
<body>
<div class='page'><h1 class='title'>Log forwarding introduction</h1><br/><h1>Log forwarding introduction</h1><br /><h2>• As mentioned before, log forwarding requires a shipper and an ingest token<br />• we’ll be using</h2><strong><h2> Elastic OSS products </h2></strong><h2>for reading and shipping logs:<br />   ◇ Filebeat - for text/log files<br />   ◇ Winlogbeat - for windows event logs<br />   ◇ Logstash - for ingesting syslog<br />• The products above will need to know endpoint URL &amp; ingest token so they can forward the logs<br />   ◇ Endpoint will be: </h2><a href="https://cloud.humio.com:443/api/v1/ingest/elastic-bulk">https://cloud.humio.com:443/api/v1/ingest/elastic-bulk</a><h2> or </h2><a href="https://cloud.us.humio.com/api/v1/ingest/elastic-bulk">https://cloud.us.humio.com/api/v1/ingest/elastic-bulk</a><br /></div>
</body>
</html>