elasticsearch - Difference between Rsyslog and Packetbeat -


while surfing through internet came accross rsyslog term monitoring , logging tool. fer points collected :

1.multi-threading 2.tcp, ssl, tls, relp 3.mysql, postgresql, oracle , more 4.filter part of syslog message 5.fully configurable output format 6.suitable enterprise-class relay chains 

similarly packetbeat used monitor network packets , uses elasticsearch , kibana. packetbeat monitors tcp, mysql etc.

so prime diff between these two?

rsyslog unix , unix operating system while on other hand packetbeat provides support operating systems. apart packetbeat can used analyze following protocols:

  • icmp (v4 , v6)
  • dns
  • http
  • mysql
  • postgresql
  • redis
  • thrift-rpc
  • mongodb
  • memcache

while rsyslog provides support following protocols:

  • 3195
  • auditd
  • gssapi
  • journal
  • klog
  • kmsg
  • mark
  • ptcp
  • relp
  • solaris
  • tcp
  • udp
  • uxsock
  • zmq3

so use cases of both rsyslog , packetbeat varies if want monitor rest api transactions , mongo db transactions can use packetbeat when integerated kibana can used visualise traffic on ports api server running.


Comments

Popular posts from this blog

html - Firefox flex bug applied to buttons? -

html - Missing border-right in select on Firefox -

python - build a suggestions list using fuzzywuzzy -