# Can the filebeat syslog listener forward syslog output?

**URL:** https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192
**Category:** Beats
**Tags:** filebeat
**Created:** [September 19, 2018, 9:08pm UTC](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192 "2018-09-19T21:08:42Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![sgreszcz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sgreszcz/32/46322_2.png) [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)
#### Post date: [September 19, 2018, 9:08pm UTC](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192/1 "2018-09-19T21:08:42Z")

</div>

It's not too clear in the filebeat syslog input documentation, but can filebeat output in RFC3164 or RFC5424 format (to file or to other remote syslog destination) or can it only write to JSON (Logstash/Elastic/local filesystem)?

---

<div class="post-metadata">

### Author: ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [September 20, 2018, 11:08am UTC](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192/2 "2018-09-20T11:08:38Z")

</div>

Hi @sgreszcz 🙂

Here you can read the outputs you can use [https://www.elastic.co/guide/en/beats/filebeat/master/configuring-output.html](https://www.elastic.co/guide/en/beats/filebeat/master/configuring-output.html)

You can also use Elasticsearch output to do parsing and formatting [https://www.elastic.co/guide/en/beats/filebeat/master/configuring-ingest-node.html](https://www.elastic.co/guide/en/beats/filebeat/master/configuring-ingest-node.html) but as far as I know there's no way to do it directly in the Filebeat.

Best regards

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 18, 2018, 11:08am UTC](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192/3 "2018-10-18T11:08:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
