# Beats Input Logging

**URL:** https://discuss.elastic.co/t/beats-input-logging/386116
**Category:** Logstash
**Created:** [May 1, 2026, 9:29am UTC](https://discuss.elastic.co/t/beats-input-logging/386116 "2026-05-01T09:29:23Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![dawiro](https://avatars.discourse-cdn.com/v4/letter/d/71e660/32.png) [@dawiro](https://discuss.elastic.co/u/dawiro)
#### Post date: [May 1, 2026, 9:29am UTC](https://discuss.elastic.co/t/beats-input-logging/386116/1 "2026-05-01T09:29:24Z")

</div>

Hi,  
Can anyone give me a steer regarding difference between `logstash.input.beats` and `org.logstash.beats` in the logging hierarchy? How do they relate to one another and how do they differ?

Thx  
D

---

<div class="post-metadata">

### Author: ![covj12](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/covj12/32/147474_2.png) [@covj12](https://discuss.elastic.co/u/covj12)
#### Post date: [May 1, 2026, 1:56pm UTC](https://discuss.elastic.co/t/beats-input-logging/386116/2 "2026-05-01T13:56:34Z")

</div>

**`logstash.input.beats`** = Logstash Beats plugin logs (what the plugin does)

**`org.logstash.beats`** = Java library logs (how the protocol works underneath)

The plugin uses the library, so `org.logstash.beats` is lower-level detail.