OPNsense

  • System => Settings => Logging => Remote => Add (+)
  • Enabled: true
  • Transport: UDP(4)
  • Applications: Select all
  • Levels: Select all
  • Facilities: Select all
  • Hostname: [ logstash_ip_or_hostname ]
  • Port: 514 (if using syslog)