When Logstash and Syslog go wrong Replacing Logstash's syslog input with tcp, udp, and grok plugins so you can catch non-RFC syslog variants and route failed parses to a file September 19, 2014 · 7 min read · #logstash #sysadmin #devops #syslog