# Elastic Stack Setup for Multiple Server
**URL:** https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649
**Category:** Elasticsearch
**Created:** [June 5, 2018, 2:55pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649 "2018-06-05T14:55:08Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 5, 2018, 2:55pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/1 "2018-06-05T14:55:08Z")
Dear All,
I have 10 servers with different application and different clients. I want to setup ELK Stack server for all of them in one place. The server will be sending following logs to my ELK Box
1. Apache Access & Error logs
2. SSH access and Failed logs
3. Mail Logs (Postfix / Exim)
4. Mysql Logs / Slow query
5. System Logs ( CPU / RAM /DISK / LOAD AVERAGE)
6. Firewall Logs
7. IDS logs
8. clam av logs
9. Maldet logs
10. Aide logs
Now my questions are
11. How to differentiate the logs by host ?
12. For 1 single server I will put the filters in the say server1.conf file and parse them will it work ?
13. How to see the data on Kibana dashboard for each server is it like creating different dashboards and visualization ?
Please help
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 6, 2018, 9:07am UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/2 "2018-06-06T09:07:47Z")
can someone please help ?
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 6, 2018, 9:20am UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/3 "2018-06-06T09:20:59Z")
Read [this](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and specifically the "Also be patient" part.
It's fine to answer on your own thread after 2 or 3 days (not including weekends) if you don't have an answer.
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 6, 2018, 9:23am UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/4 "2018-06-06T09:23:15Z")
got it
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 8, 2018, 10:18am UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/5 "2018-06-08T10:18:46Z")
any pointers folks ?
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 25, 2018, 2:38pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/6 "2018-06-25T14:38:21Z")
is this a stupid question ? or is it something no one can answer? Wondering if the people in forum cant answer the stuff then who else can ?
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 25, 2018, 4:24pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/7 "2018-06-25T16:24:29Z")
> How to differentiate the logs by host ?
It depends on what you are using to ship the logs. If you are using filebeat, there is a field which has that value by default.
> For 1 single server I will put the filters in the say server1.conf file and parse them will it work ?
I don't understand the question.
> How to see the data on Kibana dashboard for each server is it like creating different dashboards and visualization ?
Filebeat comes with some default dashboards but anyway, if the server is part of the document indexed in elasticsearch, then it's easy to add a filter on whatever server in Kibana.
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 25, 2018, 6:10pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/8 "2018-06-25T18:10:23Z")
For 1 single server I will put the filters in the say server1.conf file and parse them will it work ?
So for example I have [srv1.example.com](http://srv1.example.com) and I want to parse logs from that server
1. Apache Logs
2. Firewall Logs
3. SSH auth logs
4. System Logs - CPU / MEMORY etc
and I create a file with the hostname srv1.example.conf and put the filters in one file for all of the above
will it work ?
---
### Author:  [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [June 25, 2018, 6:28pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/9 "2018-06-25T18:28:38Z")
I don't know. I still don't understand. May be an example would help?
Or may be someone else understands what you are looking for...
---
### Author:  [@w0lfxpunk](https://discuss.elastic.co/u/w0lfxpunk)
#### Post date: [June 25, 2018, 7:11pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/10 "2018-06-25T19:11:06Z")
ok sure Let me create a diagram and an example , thank you for your reply and help.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 23, 2018, 7:11pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-for-multiple-server/134649/11 "2018-07-23T19:11:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.