# Elasticsearch with log data and elastic stack

**URL:** <https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426>\
**Category:** Elasticsearch\
**Created:** [May 3, 2018, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426 "2018-05-03T10:27:38Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ramyaa](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/32.png) [@Ramyaa](https://discuss.elastic.co/u/Ramyaa)\
**Post date:** [May 3, 2018, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/1 "2018-05-03T10:27:39Z")

</div>

Hi,

Am using cloud version of Elastic for ingesting log data into my Elasticsearch cluster,

What is the method or which Elastic stack to use to ingest data into the cluster?

Kind Regards,  
Ramya

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 3, 2018, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/2 "2018-05-03T10:49:09Z")

</div>

- Logstash
- Beats
- Your code

---

<div class="post-metadata">

**Author:** ![Ramyaa](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/32.png) [@Ramyaa](https://discuss.elastic.co/u/Ramyaa)\
**Post date:** [May 3, 2018, 12:38pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/3 "2018-05-03T12:38:33Z")

</div>

Basically I am looking to ingest log data,  
Is Logstash and Beats both are required to ingest log data?  
When you say Your code, can you please explain on this?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 3, 2018, 5:14pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/4 "2018-05-03T17:14:51Z")

</div>

> Is Logstash and Beats both are required to ingest log data?

Required? No. It depends on what you are doing. For simple transformations, you can use ingest node feature as well.

> When you say Your code, can you please explain on this?

Write any Java, Python, Perl, .Net, whatever lang you prefer and call elasticsearch using its HTTP endpoint.

---

<div class="post-metadata">

**Author:** ![Ramyaa](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/32.png) [@Ramyaa](https://discuss.elastic.co/u/Ramyaa)\
**Post date:** [May 4, 2018, 10:51am UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/5 "2018-05-04T10:51:18Z")

</div>

Thanks for this, now i can better explain the use case looking for i.e., transforming log data into transaction data, can you advise what is the method or feature to use for this?

Another use case for log data: is Logstash or Beats required to import log data into the cluster?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 4, 2018, 11:57am UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/6 "2018-05-04T11:57:00Z")

</div>

> what is the method or feature to use for this?

I already did.

> Another use case for log data: is Logstash or Beats required to import log data into the cluster?

No. But it's easier with those tools.

---

<div class="post-metadata">

**Author:** ![Ramyaa](https://avatars.discourse-cdn.com/v4/letter/r/4af34b/32.png) [@Ramyaa](https://discuss.elastic.co/u/Ramyaa)\
**Post date:** [May 4, 2018, 1:19pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/7 "2018-05-04T13:19:34Z")

</div>

I already did = means Logstash or Beats can be used for the transformation of log data into transactional data, hope this is the meaning when you said "I already did"

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 4, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/8 "2018-05-04T13:41:46Z")

</div>

I said:

> For simple transformations, you can use ingest node feature as well.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 1, 2018, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-with-log-data-and-elastic-stack/130426/9 "2018-06-01T13:41:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
