# Automated log search and reporting

**URL:** <https://discuss.elastic.co/t/automated-log-search-and-reporting/168447>\
**Category:** Logs\
**Tags:** elastic-stack-alerting\
**Created:** [February 14, 2019, 4:02pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447 "2019-02-14T16:02:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kladizkov](https://avatars.discourse-cdn.com/v4/letter/k/9fc348/32.png) [@kladizkov](https://discuss.elastic.co/u/kladizkov)\
**Post date:** [February 14, 2019, 4:02pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447/1 "2019-02-14T16:02:50Z")

</div>

Hi,

I'm new to ELK. I have completed setting up ElasticSearch, Logstash and Kibana. I have 20+ servers to manage. As it is not easy to manually look for errors and warning in the logs, I think there should be something where I can easily get a notification if something wrong is detected in the logs.

Is there any such tools to setup such an automated log search and reporting?

---

<div class="post-metadata">

**Author:** ![Magnus\_Kessler](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnus_kessler/32/42001_2.png) [@Magnus\_Kessler](https://discuss.elastic.co/u/Magnus_Kessler)\
**Post date:** [February 14, 2019, 5:06pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447/2 "2019-02-14T17:06:08Z")

</div>

Yes.

Have a look at Filebeat's [Elasticsearch](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-elasticsearch.html), [Logstash](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-logstash.html) and [Kibana](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-kibana.html) modules. Filebeat also supports other common software via modules, and with a bit of extra work you can create an ingest pipeline for most other log formats.

---

<div class="post-metadata">

**Author:** ![weltenwort](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weltenwort/32/53885_2.png) [@weltenwort](https://discuss.elastic.co/u/weltenwort)\
**Post date:** [February 14, 2019, 6:18pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447/3 "2019-02-14T18:18:41Z")

</div>

@kladizkov,

it sounds like you are looking for the [Alerting](https://www.elastic.co/guide/en/elastic-stack-overview/current/xpack-alerting.html) functionality. Unfortunately there is no conventient UI to create string matching alerts like the ones you described. That means the configuration would currently involve some manual JSON wrangling, but sending a notification when a specific log entry is indexed is definitely possible. The link above shows the available triggers and actions.

Integrating this functionality into the Logs UI to make it more convenient is definitely on our mind.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 14, 2019, 6:18pm UTC](https://discuss.elastic.co/t/automated-log-search-and-reporting/168447/4 "2019-03-14T18:18:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.