# Can Filebeat ship the below type of log files? Or WInlogbeat?

**URL:** <https://discuss.elastic.co/t/can-filebeat-ship-the-below-type-of-log-files-or-winlogbeat/222779>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 9, 2020, 6:23pm UTC](https://discuss.elastic.co/t/can-filebeat-ship-the-below-type-of-log-files-or-winlogbeat/222779 "2020-03-09T18:23:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mehak\_Bhargava](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mehak_bhargava/32/54750_2.png) [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Post date:** [March 9, 2020, 6:23pm UTC](https://discuss.elastic.co/t/can-filebeat-ship-the-below-type-of-log-files-or-winlogbeat/222779/1 "2020-03-09T18:23:55Z")

</div>

I read that Winlogbeat is a Windows specific log-shipper but I have installed FIlebeat to ship log files from server to linux system with ELK. Can filebeat actually ship these log type files properly? Or is Winlogbeat better?

```auto
2020-03-04 02:36:21,595 [DispatcherScheduler_Worker-1] INFO o.a.c.h.HttpMethodDirector - I/O exception (java.net.ConnectException) caught when processing request: Connection timed out: connect DispatcherApp\logs\dispatcher.log

```

```auto
2020-03-03 11:56:34,536 [Thread-40] INFO c.e.d.a.AdapterFactory - stopAdapter; adapterName=fdsadapterRecoveryForVendor4 DispatcherApp\logs\dispatcher-adapter.log

```

```auto
2020-03-04 00:00:10,285 [QuartzScheduler_DispatcherScheduler-NON_CLUSTERED_MisfireHandler] DEBUG o.q.i.j.JobStoreTX - MisfireHandler: scanning for misfires... quartz.log

```

```auto
2020-03-04 00:19:05,077 INFO [qtp1763490167-36611] c.e.r.dal.jpa.SessionRegistryDalJpa - logout; C04FFA20E0A6387E831C; userName=null; sessionHashToLogout=null; service=null; clientIp=null; logoutType=appRestarted; childApplicationName=DA; logoutAction=LOGOUT_APP_KEY;ticketToLogout=null; appKeyForAppRestartLogout=DA; tagToLogout=internal; RBACService\logs\rbac.log

```

```auto
2020-03-04 11:02:12,013 DEBUG [qtp1161247752-524] com.esq.rbac.sso.CasServlet - login; sessionUsername=null; renew=false; service=https://DataEdge:28443/client/j_spring_cas_security_check; sessionHash=7b801e6617a7021950900920405a977e81ecb56ada4d0dd3a205f5c83178369e;

```

```auto
2020-03-04 11:02:12,481 ERROR [qtp1161247752-455] ssoErrorJsp.jsp - request=/sso/a/css/esq.css; ip=192.168.10.200; exception=null; exceptionStack=null; status=404;

```

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [March 10, 2020, 8:33am UTC](https://discuss.elastic.co/t/can-filebeat-ship-the-below-type-of-log-files-or-winlogbeat/222779/2 "2020-03-10T08:33:36Z")

</div>

Hi,

as long as the filebeat configuration meets your needs to deliver logs, you're good to go. Winlogbeat is useful when you want to dive deeper into windows event (e.g. logged by services).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 7, 2020, 8:33am UTC](https://discuss.elastic.co/t/can-filebeat-ship-the-below-type-of-log-files-or-winlogbeat/222779/3 "2020-04-07T08:33:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.