# Connection logstash to filebeat **URL:** \ **Category:** Logstash\ **Created:** [July 6, 2018, 12:44pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913 "2018-07-06T12:44:49Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Labibme](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/labibme/32/31733_2.png) [@Labibme](https://discuss.elastic.co/u/Labibme)\ **Post date:** [July 6, 2018, 12:44pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/1 "2018-07-06T12:44:49Z")
Hi Team, I'm looking for a way to connect a logstash to filebeat but i can't find any way. In documentation neither in internet, may be someone already tried that before. Destination is to have: kafka stream to logstash and logstash stream to filebeat and filebeat stream to another logstash in a distant site==\> kafka ==\> logstash ==\> filebeat ==\> logstash Thanks, ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [July 6, 2018, 12:48pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/2 "2018-07-06T12:48:12Z")
What's the point of Filebeat? Why not just connect the two Logstash instances with a set of lumberjack inputs/outputs? Logstash can't connect to Filebeat in the network sense since Filebeat doesn't listen to network connections, but you can of course use a file output in Logstash that writes to a file that Filebeat monitors. ---
**Author:** ![Labibme](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/labibme/32/31733_2.png) [@Labibme](https://discuss.elastic.co/u/Labibme)\ **Post date:** [July 6, 2018, 12:52pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/3 "2018-07-06T12:52:38Z")
Hi, thanks @magnusbaeck, i open another discussion about lumberjack. We don't have this option with logstash "6.3".. No way to get "lumberjack input plugin". We are working on disconnected mode and no one can get got it here if we can't got it on offline mode. So, we are blocked with the logstash 6.3. This is only working with 2.X version. Another detail, that lumberjack is deprecated and will be removed in futur from ELK plugin list. Regarding filebeat, we can't use it as input to the (1) logstash because is not compatible with kafka. Thanks, ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 6, 2018, 12:54pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/4 "2018-07-06T12:54:06Z")
The lumberjack output plugin should be able to connect to a beats input plugin. ---
**Author:** ![Labibme](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/labibme/32/31733_2.png) [@Labibme](https://discuss.elastic.co/u/Labibme)\ **Post date:** [July 6, 2018, 12:58pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/5 "2018-07-06T12:58:35Z")
Yeah, exactly i'm using that actually. But the message is malformed, there's another topic already opened for this: > [@Malformed logstash message](https://discuss.elastic.co/t/malformed-logstash-message/138205/6): > > If you can point me to right link for "lumberjack input plugin" for "6.4.0" it will be a pleasure. You can't install it with the logstash-plugin command? Then I don't know. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 3, 2018, 12:58pm UTC](https://discuss.elastic.co/t/connection-logstash-to-filebeat/138913/6 "2018-08-03T12:58:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.