# Any tool/plugin in ELK stack to scan IIS logs to generate the source in CSV or desired format to logstash **URL:** \ **Category:** Logstash\ **Created:** [March 14, 2018, 3:24pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933 "2018-03-14T15:24:20Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![jason\_smith](https://avatars.discourse-cdn.com/v4/letter/j/b5e925/32.png) [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Post date:** [March 14, 2018, 3:24pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933/1 "2018-03-14T15:24:21Z")
Hello Good folks, So far the samples i have done are all the CSV files that are sourced into Elastic search thru logstash. If I want to read IIS logs for specific errors is there a plugin in ELK stack or any tool that scans the IIS logs for the desired fields and generate CSV file? Thank You ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 14, 2018, 8:07pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933/2 "2018-03-14T20:07:44Z")
If the IIS logs are in Event Viewer then you can use winlogbeat to extract them. But why do you want to put them in CSV? ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [March 14, 2018, 8:32pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933/3 "2018-03-14T20:32:45Z")
Assuming you mean either the access or error logs, and not the FREB logs, then I would ingest the entire log with filebeat. You could then use logstash with an elasticsearch input and a csv output and whatever filters you want in the middle. You might want to explain the use case a little more, because I think @warkolm and I are reading different use cases into what you wrote. ---
**Author:** ![jason\_smith](https://avatars.discourse-cdn.com/v4/letter/j/b5e925/32.png) [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Post date:** [March 14, 2018, 8:39pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933/4 "2018-03-14T20:39:49Z")
I asked this question prematurely. I realized that we can apply filters using logstash and pull only the fields that we need. As a part this learning process of ELK, I want to ingest Jenkin logs (continous integration) and show on the dashboard the success/failed jobs that ran during last night. I have atleast 1500 jobs that run every night. In the practice samples, I only ingested data from ([kaggle.com](http://kaggle.com)) CSV files and I wrote .config (pipeline) to pull that data. It was simple so far. But when I am thinking about pulling data from Log files which are not structured like CSV files, I was thinking if there is any tool to convert the desired fields into CSV format. Now I realized that logstash can do apply filters with combination of regular expressions. Let me read more about logstash and I will post again if I need . Kind regards ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 11, 2018, 8:40pm UTC](https://discuss.elastic.co/t/any-tool-plugin-in-elk-stack-to-scan-iis-logs-to-generate-the-source-in-csv-or-desired-format-to-logstash/123933/5 "2018-04-11T20:40:04Z")
Closed on April 11, 2018, 8:40pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.