# Best way to ingest data from windows c++ app

**URL:** <https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093>\
**Category:** Logstash\
**Created:** [November 30, 2020, 3:36pm UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093 "2020-11-30T15:36:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![robderon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robderon/32/79935_2.png) [@robderon](https://discuss.elastic.co/u/robderon)\
**Post date:** [November 30, 2020, 3:36pm UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093/1 "2020-11-30T15:36:10Z")

</div>

Hello,

I must create a Kibana dashboard to analyze a windows c++ application usage : screen viewed, actions, app launching, subscription etc..  
Our plan is to send data from the clients to our server (not elastic) once a day, to minimize traffic, and we don't need realtime, the 24h delay is not a problem.  
The question is : once our server collected the app data, what is the best way to feed it to elastic ?  
Should we create bulk json and use curl ?  
Or dump text file logs with a custom format and rely on logstash to send it to Elasticsearch ?

I don't know which way is the better.  
Thank you in advance for your help,

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 2, 2020, 12:48am UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093/2 "2020-12-02T00:48:31Z")

</div>

Welcome to our community! 😃

The best way to do it is to write to a file and then use something like Filebeat to send it to Elasticsearch.

The issues with writing directly to Elasticsearch is that you then don't have a local copy in case of a major issue in your stack that causes logging to break; if your app gets a big load of traffic it might cause Elasticsearch to backlog, delaying log delivery and potentially deadlocking your app; and things along that line.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 30, 2020, 12:48am UTC](https://discuss.elastic.co/t/best-way-to-ingest-data-from-windows-c-app/257093/3 "2020-12-30T00:48:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.