title: Filebeat vs Rsyslog for forwarding logs
body: <p>I am currently using filebeat to forward logs to logstash and then to elasticsearch.</p>
  
  <p>Now, I am thinking about forwarding logs by rsyslog to logstash. The benefit of this would be that, I would not need to install and configure filebeat on every server, and also I can forward logs in JSON format which is easy to parse and filter.</p>
  
  <p>I can use TCP/UDP to forward logs to logstash by rsyslog.</p>
  
  <p>I want to know the more benefits and drawbacks of rsyslog over filebeat, in terms of performance, reliability and ease of use.</p>