Hello,
That works:
For the Linux logs:
input {
tcp {
port => 1514
type => syslog
tags => ["linux"] # <--------tag
}
udp {
port => 1514
type => syslog
tags => ["linux"] # <--------tag
}
}
output {
if "linux" in [tags] { # <--------tag
gelf {
host => "192.168.1.206"
port => 10000
}
}
}
And for windows:
input {
beats {
port => 5000
tags => ["windows"] # <--------tag
}
}
output {
if "windows" in [tags] { # <--------tag
gelf {
host => "192.168.1.206"
port => 12201
}
}
}
Thank you.