7.1.3. Client modes The syslog-ng Premium Edition 7 Administrator Guide
The syslog-ng PE application can interact with Elasticsearch in transport mode or node mode.
Node mode. The syslog-ng PE application acts as an Elasticsearch node (client no-data), using the node client API of Elasticsearch. Further options for the node can be describe in an Elasticsearch configuration file specified in the