Thank you for this! We have elastic cloud running on azure. For us to send our on-prem cisco syslog message to elastic do we do a logstash server on-prem that then forwards logs to elastic in azure? Thanks!