Hi, Im a beginner with ELK and I want to apply different filter on my log.
This is my input file :
input {
   beats {
         type => log
         port => 5044
         host => 0.0.0.0
   }
}
With this file, we listen on port 5044, from everywhre, and each log we received on this port will have the log type. Are we ok ?

Now if i receive Apache log on this port, and Syslog too for example, how can I filter filter them. I mean how in the filter I can take only apache log, or only log file ?

And when I used filebeat modules, should I have to create by my self a filter file ?

Sorry for bad english and thank you.

---