# ELK Scalability Query
**URL:** https://discuss.elastic.co/t/elk-scalability-query/55649
**Category:** Logstash
**Created:** [July 15, 2016, 6:39pm UTC](https://discuss.elastic.co/t/elk-scalability-query/55649 "2016-07-15T18:39:48Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Gunjan\_Gupta](https://discuss.elastic.co/u/Gunjan_Gupta)
#### Post date: [July 15, 2016, 6:39pm UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/1 "2016-07-15T18:39:48Z")
Scenario:
1.ELK is already placed and currently getting three different log files as input from three different server .
2.Now as my system is in place already ,if I want to add log file from fourth server on the fly.
Question?
[1.Is](http://1.Is) it possible to add new log file as input from different server on the fly?
2.If Yes ,then how to achieve this .
Please help....
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 15, 2016, 9:40pm UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/2 "2016-07-15T21:40:42Z")
Is there any reason you have posted this in the LSF category?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 18, 2016, 8:00am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/3 "2016-07-18T08:00:46Z")
What, exactly, does "on the fly" mean in this context?
Without restarting Elasticsearch? Yes.
Without restarting Kibana? Yes.
Without restarting Logstash? Probably not, but it depends on what your configuration looks like.
---
### Author:  [@Gunjan\_Gupta](https://discuss.elastic.co/u/Gunjan_Gupta)
#### Post date: [July 18, 2016, 8:37am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/4 "2016-07-18T08:37:02Z")
On the fly means that all servers(logstash,kibana,elasticsearch) are up and running.
For third point ,my configuration have Logstash on server 1 and kibana & elastic on another server i.e server 2.
With given configuration ,do we need to restart logstash(Elastic and Kibana i need not to restart as per your last comment) to add new logs file from server 3.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 18, 2016, 9:48am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/5 "2016-07-18T09:48:22Z")
How are the events from the various servers reaching the Logstash instance on server 1? In other words, what inputs do you have?
Please edit your original post and move it to the Logstash category. It has nothing to do with logstash-forwarder.
---
### Author:  [@Gunjan\_Gupta](https://discuss.elastic.co/u/Gunjan_Gupta)
#### Post date: [July 20, 2016, 5:56pm UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/6 "2016-07-20T17:56:58Z")
I have moved this thread to Logstash. We are using Filebeat for input.
Input files: IIS Logs ,Application Logs & Perfmon Csv file.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 20, 2016, 8:32pm UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/7 "2016-07-20T20:32:55Z")
Then you don't need to restart Logstash to pick up additional files (unless you need to change the filter configuration to support those files), but you may have to restart Filebeat on the machine(s) where you've changed the input configuration.
---
### Author:  [@Gunjan\_Gupta](https://discuss.elastic.co/u/Gunjan_Gupta)
#### Post date: [July 21, 2016, 5:30am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/8 "2016-07-21T05:30:02Z")
Thanks! Magnus 🙂
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:47am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649/9 "2017-07-06T04:47:05Z")