How To Centralize Logs with Rsyslog, Logstash, and Elasticsearch on Ubuntu 14.04
Rsyslog, Elasticsearch, and Logstash provide the tools to transmit, transform, and store your log data. In this tutorial, you will learn how to create a centralized rsyslog server to store log files from multiple systems and then use Logstash to send them to an Elasticsearch server. From there, you can decide how best to analyze the data.