sof-elk
sof-elk copied to clipboard
identify supported configuration for remote `filebeat` log shipping
esp for syslog, it seems there is a vastly different parsing being applied to filebeat-shipped sources than by syslog alone. need to dig in and see what the "supported" configuration would be.
Some detail on this is covered in #325 .