# Antivirus directory exclusions on separate Kibana, Logstash, and Elastic Servers - Linux

**URL:** <https://discuss.elastic.co/t/antivirus-directory-exclusions-on-separate-kibana-logstash-and-elastic-servers-linux/370095>\
**Category:** Elasticsearch\
**Created:** [November 5, 2024, 9:12pm UTC](https://discuss.elastic.co/t/antivirus-directory-exclusions-on-separate-kibana-logstash-and-elastic-servers-linux/370095 "2024-11-05T21:12:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mmletzko](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@mmletzko](https://discuss.elastic.co/u/mmletzko)\
**Post date:** [November 5, 2024, 9:12pm UTC](https://discuss.elastic.co/t/antivirus-directory-exclusions-on-separate-kibana-logstash-and-elastic-servers-linux/370095/1 "2024-11-05T21:12:55Z")

</div>

Was wondering if anyone could tell me exactly what folders on each of these servers should be excluded from AntiVirus, or point me to the documentation that covers it:

-Kibana: Linux  
-Logstash: Linux  
-Elastic: Linux

I haven't been able to find anything concrete - just guesses/suggestions.

TIA

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 5, 2024, 10:29pm UTC](https://discuss.elastic.co/t/antivirus-directory-exclusions-on-separate-kibana-logstash-and-elastic-servers-linux/370095/2 "2024-11-05T22:29:47Z")

</div>

If you install using packages (rpm or deb) it will use the paths mentioned in the documentation.

- [Elasticsearch](https://www.elastic.co/guide/en/elasticsearch/reference/8.15/deb.html#deb-layout)
- [Logstash](https://www.elastic.co/guide/en/logstash/current/dir-layout.html#deb-layout)
- [Kibana](https://www.elastic.co/guide/en/kibana/current/deb.html#deb-layout)

---

<div class="post-metadata">

**Author:** ![mmletzko](https://avatars.discourse-cdn.com/v4/letter/m/c2a13f/32.png) [@mmletzko](https://discuss.elastic.co/u/mmletzko)\
**Post date:** [November 6, 2024, 1:38pm UTC](https://discuss.elastic.co/t/antivirus-directory-exclusions-on-separate-kibana-logstash-and-elastic-servers-linux/370095/3 "2024-11-06T13:38:55Z")

</div>

I appreciate the response, but I'm not sure you understood my question. I'm not interested in what folders the elastic stack gets installed in. I'm interested in knowing which folders (if any) should be excluded from Antivirus scanning.