# Connect ssh and access log in logstash **URL:** \ **Category:** Logstash\ **Created:** [March 29, 2017, 5:41am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406 "2017-03-29T05:41:42Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 5:41am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/1 "2017-03-29T05:41:42Z")
Hi Buddy 🙂 My log is in ssh which have username password port I have ELK pack in my local i want to connect ssh and access log for that I dont know how to configure logstash.conf can you help ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [March 29, 2017, 5:44am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/2 "2017-03-29T05:44:00Z")
What have you tried so far? Have you had a look at the [getting started guide](https://www.elastic.co/guide/en/logstash/current/getting-started-with-logstash.html)? ---
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 6:37am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/3 "2017-03-29T06:37:41Z")
buddy i tried to access log which is in present in my local file system.i can able to see in kibana input { file { path =\> [“/tsbappdata/logs/service.log"] ``` start_position => "beginning" ``` } } filter { ``` multiline { pattern => "^%{TIMESTAMP_ISO8601}" negate => “true” what => “next” } ``` } output { elasticsearch { host =\> "localhost" port =\> 9200 user =\> "username" password =\> "Password" protocol =\> "http" } stdout { codec =\> rubydebug } } **but i have to connect ssh and read log which present inside remote folder**. i dont know how to proceed can you help me to connect ssh and access log **note:** my ELK Pack will there in my local ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [March 29, 2017, 6:53am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/4 "2017-03-29T06:53:48Z")
As far as I know Logstash does not support fetching logs via ssh. ---
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 6:59am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/5 "2017-03-29T06:59:29Z")
Buddy then we cant read log from remote file ? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [March 29, 2017, 7:01am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/6 "2017-03-29T07:01:00Z")
A common practice is to deploy an agent like FileBeat to forward the logs from the remote server(s). Would that be an option? ---
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 7:06am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/7 "2017-03-29T07:06:02Z")
can you provide some link to refer filebeat ,configure fwd log from remote ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [March 29, 2017, 7:13am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/8 "2017-03-29T07:13:19Z")
Filebeat should be installed on the remote server and forward logs. It does not collect via ssh either. ---
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 7:15am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/10 "2017-03-29T07:15:35Z")
thank you buddy whether we can configure logstash in remote and elastic search,kibana in local ? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [March 29, 2017, 7:16am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/11 "2017-03-29T07:16:34Z")
The components of the Elastic stack are designed to be distributed. You can certainly set up Filebeat or Logstash on the remote servers and send data to the local one. Filebeat is designed to be lightweight and uses less resources than Logstash, which is why it is a popular collection agent. ---
**Author:** ![manopmk](https://avatars.discourse-cdn.com/v4/letter/m/b2d939/32.png) [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Post date:** [March 29, 2017, 7:17am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/12 "2017-03-29T07:17:15Z")
Thank you buddy ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 26, 2017, 7:17am UTC](https://discuss.elastic.co/t/connect-ssh-and-access-log-in-logstash/80406/13 "2017-04-26T07:17:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.