# About the winlogbeats output

**URL:** <https://discuss.elastic.co/t/about-the-winlogbeats-output/82098>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [April 12, 2017, 6:40am UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098 "2017-04-12T06:40:30Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![qiuyuanshun](https://avatars.discourse-cdn.com/v4/letter/q/58f4c7/32.png) [@qiuyuanshun](https://discuss.elastic.co/u/qiuyuanshun)\
**Post date:** [April 12, 2017, 6:40am UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098/1 "2017-04-12T06:40:30Z")

</div>

If I want to output through the network port to another server on the file, how should I set up my output, I can not find the relevant settings.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [April 12, 2017, 2:31pm UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098/2 "2017-04-12T14:31:24Z")

</div>

> [@qiuyuanshun](#):
>
> If I want to output through the network port to another server on the file

Can you please clarify by what you mean with "to another server on the file".

Beats have support for several output types. Each is listed in the [documentation](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-configuration-details.html).

---

<div class="post-metadata">

**Author:** ![qiuyuanshun](https://avatars.discourse-cdn.com/v4/letter/q/58f4c7/32.png) [@qiuyuanshun](https://discuss.elastic.co/u/qiuyuanshun)\
**Post date:** [April 13, 2017, 1:13am UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098/3 "2017-04-13T01:13:19Z")

</div>

Thank you for your reply. I need the syslog format output, but winlogbeat does not support, so I would like to output json encoded data flow to other ports, but I do not know how to do it.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [April 13, 2017, 1:21pm UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098/4 "2017-04-13T13:21:20Z")

</div>

You could setup a central Logstash server to route the data from Beats as needed. Use the [`beats`](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html) input and the [`syslog`](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-syslog.html) output.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 3, 2017, 6:40am UTC](https://discuss.elastic.co/t/about-the-winlogbeats-output/82098/5 "2017-05-03T06:40:30Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.