如何整合Debian Syslog与其他日志系统

sudo apt-get update
sudo apt-get install syslog-ng

<code>source s_local {
    unix-stream("/dev/log");
    file("/var/log/syslog");
};

destination d_remote {
    tcp("remote_server_ip" port(514));
};

log {
    source(s_local);
    destination(d_remote);
};</code>

sudo apt-get update
sudo apt-get install rsyslog

<code>module(load="imudp")
input(type="imudp" port="514")

module(load="imtcp")
input(type="imtcp" port="514")

*.* @remote_server_ip:514</code>

sudo apt-get update
sudo apt-get install fluentd

<code><source>
  @type syslog
  port 514
  bind 0.0.0.0
</source>
<match **>
  @type forward
  <server>
    host remote_server_ip
    port 24224
  </server>
</match></code>

sudo apt-get update
sudo apt-get install logstash

<code>input {
  syslog {
    port => 514
    type => "syslog"
  }
}

output {
  elasticsearch {
    hosts => ["http://remote_server_ip:9200"]
    index => "syslog-%{YYYY.MM.dd}"
  }
}</code>

sudo apt-get update
sudo apt-get install filebeat

filebeat.inputs:
- type: syslog
  port: 514
  protocol: udp

output.elasticsearch:
  hosts: ["http://remote_server_ip:9200"]