Sending pfSense Logs over TLS to Fluent Bit server

[Nimizu]

Hello everyone (hoping i'm in the right category because i couldn't really find one matching)

I’m trying to send pfSense logs over TLS to a Fluent Bit server, but I’m running into issues.

Logs work fine over UDP 514, but I do need encryption over the Internet since its not internal traffic.

I tried a WireGuard VPN, which worked for a single device, but managing multiple pfSense devices became tricky :/

I installed syslog-ng to forward logs over TLS, but the WebUI doesn’t support TLS client config, and manual edits aren’t stable for multiple devices as i've seen multiple reviews about this from a few years before now.

I had a few questions if some of you could answer one of them !

• Has anyone successfully done TLS forwarding from pfSense to Fluent Bit?

• Is it possible without manually editing syslog-ng? Has it become stable?

• Is VPN the safer approach, or is there a better TLS solution?

I’m looking for a secure and maintainable setup for multiple pfSense devices.

Thanks and have a good day