# ELK without logstash?

**URL:** <https://discuss.elastic.co/t/elk-without-logstash/115184>\
**Category:** Logstash\
**Created:** [January 11, 2018, 10:23pm UTC](https://discuss.elastic.co/t/elk-without-logstash/115184 "2018-01-11T22:23:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wweeder](https://avatars.discourse-cdn.com/v4/letter/w/c68b51/32.png) [@wweeder](https://discuss.elastic.co/u/wweeder)\
**Post date:** [January 11, 2018, 10:23pm UTC](https://discuss.elastic.co/t/elk-without-logstash/115184/1 "2018-01-11T22:23:53Z")

</div>

Is it possible to use ELK without logstash? I have filebeats, elasticsearch and kibana running without any problems, but inserting logstash into this mix seems like a real pain.

I am new to ELK stack, and probably missing something, but what value does logstash bring? if my beats read the log files, and I can use grok filters on kibana to make the output searchable in a practical way, then why do I need logstash?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 11, 2018, 10:38pm UTC](https://discuss.elastic.co/t/elk-without-logstash/115184/2 "2018-01-11T22:38:05Z")

</div>

If what you have works then there's no need to complicate it. Logstash just adds extra capabilities.

Also FYI we’ve renamed ELK to the Elastic Stack, otherwise Beats and APM feel left out! 😉 See [https://www.elastic.co/elk-stack](https://www.elastic.co/elk-stack)

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [January 16, 2018, 11:02am UTC](https://discuss.elastic.co/t/elk-without-logstash/115184/3 "2018-01-16T11:02:39Z")

</div>

> if my beats read the log files, and I can use grok filters on kibana to make the output searchable in a practical way, then why do I need logstash?

Kibana doesn't do any grokking so it's not clear what you mean.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 13, 2018, 11:02am UTC](https://discuss.elastic.co/t/elk-without-logstash/115184/4 "2018-02-13T11:02:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.