# Elastic Agent 7.10.1 - Understanding/Changing Data Destination

**URL:** <https://discuss.elastic.co/t/elastic-agent-7-10-1-understanding-changing-data-destination/279267>\
**Category:** Beats\
**Tags:** fleet\
**Created:** [July 21, 2021, 1:05pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-1-understanding-changing-data-destination/279267 "2021-07-21T13:05:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cpoetzel](https://avatars.discourse-cdn.com/v4/letter/c/5f9b8f/32.png) [@cpoetzel](https://discuss.elastic.co/u/cpoetzel)\
**Post date:** [July 21, 2021, 1:05pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-1-understanding-changing-data-destination/279267/1 "2021-07-21T13:05:06Z")

</div>

I walked into an existing ELK stack and an learning as i go.  
Ihave a 7.10.1 ELK Stack with around 5K Agents depolyed at 7.10.1 using Fleet.  
\*\* Understanding DATA Destination \*\*  
Under the Global Fleet Settings it says.  
"Global Output: Specify Where to send the Data"

there is a Kibana URL and an ElasticSearch URL.  
Which Destination is actually receiving the data?

\*\* Changing DATA Destination \*\*  
I have been asked if we can send the agent logs through an intermediate KAFKA syslog layer, then following our more standard data log ingesting using Topics/Logstash off of those.

Some questions:  
Are the logs in syslog format from the agents to the data destination?  
Could i add another data destination in Fleet and push that out to the Agents?  
Does this approach make sense?

thanks all for your thoughts/help on this topic.  
 ![FleetGlobalSettings](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3f8ca09bfbd8ed4e9e772efa98a1da5a60bd7bc0.jpeg)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 18, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elastic-agent-7-10-1-understanding-changing-data-destination/279267/2 "2021-08-18T15:05:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
