Iis – parse old IIS logs with logstash

I'm not sure if I understood the question correctly, but I do know that Syslog-NG can ship directly to Logstash without the need for an additional shipper as an intermediary. You could define a destination in syslog-ng.conf similar to this example:

destination d_logstash { 
  tcp("10.0.0.1" port(5514)); 
};

And then define a log action to send Syslog messages from source s_src to destination:

log {
  source(s_src);
  destination(d_logstash);
};

Which should enable the message transmission. Don't forget to restart the syslog-ng service to apply the changes.

source: The Logstash Book

The 'Tools that works with Graphite' page http://graphite.readthedocs.org/en/latest/tools.html list several. I have tried the PowerShell script 'Graphite PowerShell Functions' https://github.com/MattHodge/Graphite-PowerShell-Functions and it works well.

edit I mis-read your question, you were talking only about Logstash and Kibana but not about Graphite. I don't use Logstash+Kibana for system metrics, but I use Statsd+Graphite. So not sure if my answer is valid to you but if you use the Graphite Logstash input http://logstash.net/docs/1.4.2/ you could use these tools.