Describe the enhancement:

There is support for unix socket inputs in filebeat from version 7.8

This is done using protocol.unix as described here

This creates a TCP socket - but eg rsyslog assumes UDP

for ref, the ticket where support was added #10934

Describe a specific use case for the enhancement or feature:

use with any syslog engine that outputs to a UDP socket