Currently network devices send logs directly to Logstash via syslog. Over time this approach has proven to be fragile, and such has been deprecated in favor of the Kafka enabled logging pipeline.
In order to enable devices that do not have native Kafka producer capability we'll support a relay feature on the central syslog hosts. Syslogs can be sent to the nearest central rsyslog host, and from there will be forwarded to the Kafka logging pipeline, and optionally logged locally.
Creating this task to track the deployment of the syslog -> Kafka relay, testing, and migration of network devices away from the syslog input.