# Elastic-agent without data-stream

**URL:** <https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093>\
**Category:** Elasticsearch\
**Created:** [June 9, 2024, 8:20am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093 "2024-06-09T08:20:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Viktor\_Movita](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/viktor_movita/32/135707_2.png) [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\
**Post date:** [June 9, 2024, 8:20am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093/1 "2024-06-09T08:20:34Z")

</div>

Hello everyone,  
I previously monitored my Linux servers using Filebeat and Metricbeat agents. The data from each of them went to a dedicated index in Elasticsearch based on the default ECS template.  
Now I want to switch to using the Elastic agent version 8.11.3, but I want it to work the same way with Elasticsearch, which isn't possible because it operates on data streams. Is there a way to work without data streams in the old way? (The agent writes to the Logstash server, and it writes to Elasticsearch).

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 9, 2024, 9:50am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093/2 "2024-06-09T09:50:07Z")

</div>

Why do you want this? What is the benefit?

---

<div class="post-metadata">

**Author:** ![Viktor\_Movita](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/viktor_movita/32/135707_2.png) [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\
**Post date:** [June 9, 2024, 11:49am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093/3 "2024-06-09T11:49:32Z")

</div>

> [@Christian\_Dahlqvist](#):
>
> Why do you want this? What is the benefit?

I want to explore this option because that's how my infrastructure is currently set up.  
It doesn't necessarily have advantages.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 9, 2024, 12:28pm UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093/4 "2024-06-09T12:28:15Z")

</div>

Have you ckecked [the documentation around output configuration](https://www.elastic.co/guide/en/fleet/8.14/ls-output-settings.html)?

---

<div class="post-metadata">

**Author:** ![Viktor\_Movita](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/viktor_movita/32/135707_2.png) [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\
**Post date:** [June 13, 2024, 8:05am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093/5 "2024-06-13T08:05:36Z")

</div>

Certainly, and I did not find any useful information here for my question.
