# Can I use a filebeat server for centralize log collected data from many different devices? **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [January 27, 2022, 5:44am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541 "2022-01-27T05:44:25Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![siranee.ja](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@siranee.ja](https://discuss.elastic.co/u/siranee.ja)\ **Post date:** [January 27, 2022, 5:44am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/1 "2022-01-27T05:44:25Z")
This is my example infra as the question. 1. Fortinet device 2. Haproxy Server 3. Apache Server 4. A filebeat server 5. An ELK stack server ```auto device a filebeat server an elk stack server Fortinet device ---> filebeat with module fortinet on port 9400 --> logstash->elasticsearch->kibana haproxy server --> filebeat with module haproxy on port 514 --> apache server --> filebeat with module apache on port 514 --> ``` Is this possible or not possible? If this is not possbile. What is the best practice? ---
**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\ **Post date:** [January 28, 2022, 10:56am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/2 "2022-01-28T10:56:13Z")
Filebeat is a lightweight data shipper, so it's better to configure a few instances close to the monitored device or service. If you want to depend on a single central instance of filebeat, you will have a serious outage if it dies (single point of failure, no logging at all). ---
**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Post date:** [January 28, 2022, 2:59pm UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/3 "2022-01-28T14:59:07Z")
Also the haproxy and Apache modules are designed to read the log files directly on the server not receive them via syslog. ---
**Author:** ![siranee.ja](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@siranee.ja](https://discuss.elastic.co/u/siranee.ja)\ **Post date:** [January 31, 2022, 6:11am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/4 "2022-01-31T06:11:37Z")
Thanks for your advise. ---
**Author:** ![siranee.ja](https://avatars.discourse-cdn.com/v4/letter/s/bbce88/32.png) [@siranee.ja](https://discuss.elastic.co/u/siranee.ja)\ **Post date:** [January 31, 2022, 6:16am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/5 "2022-01-31T06:16:54Z")
```auto Ok, for the device which I can install filebeat, I should install on the device. How about network device which I couldn't install filebeat for example Fortigate 2 devices Mikrotik 2 devices Should I set up 2 vms for install filebeat and receive logs via syslog from separated each branded devices or 4 vms for each device? ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 28, 2022, 8:17am UTC](https://discuss.elastic.co/t/can-i-use-a-filebeat-server-for-centralize-log-collected-data-from-many-different-devices/295541/6 "2022-02-28T08:17:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.