elasticsearch - Difference between Rsyslog and Packetbeat -


while surfing through internet came accross rsyslog term monitoring , logging tool. fer points collected :

1.multi-threading 2.tcp, ssl, tls, relp 3.mysql, postgresql, oracle , more 4.filter part of syslog message 5.fully configurable output format 6.suitable enterprise-class relay chains 

similarly packetbeat used monitor network packets , uses elasticsearch , kibana. packetbeat monitors tcp, mysql etc.

so prime diff between these two?

rsyslog unix , unix operating system while on other hand packetbeat provides support operating systems. apart packetbeat can used analyze following protocols:

  • icmp (v4 , v6)
  • dns
  • http
  • mysql
  • postgresql
  • redis
  • thrift-rpc
  • mongodb
  • memcache

while rsyslog provides support following protocols:

  • 3195
  • auditd
  • gssapi
  • journal
  • klog
  • kmsg
  • mark
  • ptcp
  • relp
  • solaris
  • tcp
  • udp
  • uxsock
  • zmq3

so use cases of both rsyslog , packetbeat varies if want monitor rest api transactions , mongo db transactions can use packetbeat when integerated kibana can used visualise traffic on ports api server running.


Comments

Popular posts from this blog

mysql - FireDac error 314 - but DLLs are in program directory -

git - How to list all releases of public repository with GitHub API V3 -

c++ - Getting C2512 "no default constructor" for `ClassA` error on the first parentheses of constructor for `ClassB`? -