elasticsearch - Difference between Rsyslog and Packetbeat -
while surfing through internet came accross rsyslog term monitoring , logging tool. fer points collected :
1.multi-threading 2.tcp, ssl, tls, relp 3.mysql, postgresql, oracle , more 4.filter part of syslog message 5.fully configurable output format 6.suitable enterprise-class relay chains
similarly packetbeat used monitor network packets , uses elasticsearch , kibana. packetbeat monitors tcp, mysql etc.
so prime diff between these two?
rsyslog unix , unix operating system while on other hand packetbeat provides support operating systems. apart packetbeat can used analyze following protocols:
- icmp (v4 , v6)
- dns
- http
- mysql
- postgresql
- redis
- thrift-rpc
- mongodb
- memcache
while rsyslog provides support following protocols:
- 3195
- auditd
- gssapi
- journal
- klog
- kmsg
- mark
- ptcp
- relp
- solaris
- tcp
- udp
- uxsock
- zmq3
so use cases of both rsyslog , packetbeat varies if want monitor rest api transactions , mongo db transactions can use packetbeat when integerated kibana can used visualise traffic on ports api server running.
Comments
Post a Comment