# Can I pass application logs to filebeat?

**URL:** <https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 17, 2020, 3:56am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574 "2020-07-17T03:56:22Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bhavin\_Varsur](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Post date:** [July 17, 2020, 3:56am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/1 "2020-07-17T03:56:23Z")

</div>

I want to pass application logs to filebeat . Can I pass ? if yes then how should I pass?

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 17, 2020, 7:45am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/2 "2020-07-17T07:45:20Z")

</div>

Hi!

What do you mean by "pass"?  
In general you can tune your application to "print" logs in a log file like `/var/log/myapp.log` and then configure Filebeat to collect the logs from this log file using a log input:  
[https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html)

---

<div class="post-metadata">

**Author:** ![Bhavin\_Varsur](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Post date:** [July 17, 2020, 9:44am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/3 "2020-07-17T09:44:37Z")

</div>

Thanks for your time !!  
actually the same i did.  
i added filebeat log input and paths where my log files located.  
but i can't see those log line in kibana( dashboard)

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 17, 2020, 11:31am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/4 "2020-07-17T11:31:24Z")

</div>

I would suggest running Filebeat in debug mode with `./filebeat -e -d "*"` and see if there are events emitted.  
Are you sending events from Filebeat to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![Bhavin\_Varsur](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Post date:** [July 17, 2020, 12:59pm UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/5 "2020-07-17T12:59:14Z")

</div>

I want work with this chain  
Filebeat =\> Logstash =\> Elasticsearch

i'm sending log lines to filebeat

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 17, 2020, 1:35pm UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/6 "2020-07-17T13:35:12Z")

</div>

Then you first need to verify that you can successfully send logs from Filebeat to Logstash and then from Logstash to Elasticsearch.

---

<div class="post-metadata">

**Author:** ![Bhavin\_Varsur](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Bhavin\_Varsur](https://discuss.elastic.co/u/Bhavin_Varsur)\
**Post date:** [July 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/7 "2020-07-18T12:44:38Z")

</div>

how can i verify filebeat sendting logs to logstash?

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 20, 2020, 7:27am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/8 "2020-07-20T07:27:04Z")

</div>

Going deep and try to understand as much as possible around your setup: Run both in debug mode and check that there are no errors and that there are logs indicating that everything works fine.

Black box approach: Configure Logstash to send to Elasticsearch too and verify that documents are ingested in Elasticsearch.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 17, 2020, 9:27am UTC](https://discuss.elastic.co/t/can-i-pass-application-logs-to-filebeat/241574/9 "2020-08-17T09:27:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
