From what i read it should be possible https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-syslog.html   https://discuss.elastic.co/t/filebeat-syslog-input-enable-both-tcp-udp-on-port-514/228671   ... View more