How to watch all recordings via one vm

I have an environment composed of :

2 machines, each with tlog and rsyslog-client installed
1 remote machine as REK, with Rsyslog-Elastic-Kibana stack installed
Sessions are transferred to the monitoring machine, but at present, I view records on the machines themselves. I'd like to be able to view all recordings directly via the REK machine. How can I do this?