Install Filebeat on your hosts, configure it to ship system logs to Logstash, work around the 9.x fileset trap, and verify logs flow into Elasticsearch.