# DNS Logs: Packetbeat or Filebeat?
**URL:** https://discuss.elastic.co/t/dns-logs-packetbeat-or-filebeat/237519
**Category:** Beats
**Tags:** filebeat, packetbeat
**Created:** [June 17, 2020, 5:26pm UTC](https://discuss.elastic.co/t/dns-logs-packetbeat-or-filebeat/237519 "2020-06-17T17:26:52Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@uklipse](https://discuss.elastic.co/u/uklipse)
#### Post date: [June 17, 2020, 5:26pm UTC](https://discuss.elastic.co/t/dns-logs-packetbeat-or-filebeat/237519/1 "2020-06-17T17:26:52Z")
I need to implement internal DNS logging and I'm trying to determine which is better filebeat or packetbeat. This is a Windows DNS server and the logs can be written to a local file which we can read with filebeat or we can have packetbeat read the incoming DNS requests.
I'm curious as to what others have seen in regards to performance on the host, number and size of these logs, any missed logs or if there is another metric that can be used to compare the two.
---
### Author:  [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [June 18, 2020, 7:08am UTC](https://discuss.elastic.co/t/dns-logs-packetbeat-or-filebeat/237519/2 "2020-06-18T07:08:42Z")
I'd go with packetbeat because it's created, by design, with that purpose in mind. Then you can always connect Filebeat later if you also need to parse logs to get some extra information.
Performance must be similar because the "underlying engine" is the same.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 16, 2020, 9:08am UTC](https://discuss.elastic.co/t/dns-logs-packetbeat-or-filebeat/237519/3 "2020-07-16T09:08:45Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.