HELK ETL

Winlogbeat à kafka à logstash à elasticsearch   1. Winlogbeat   Winlogbeat 配置： output.kafka:     # initial brokers for reading cluster metadata     # Place your HELK IP(s) here (keep the port).     #

>>阅读原文<<