# Filebeat 2 log sources

**URL:** <https://discuss.elastic.co/t/filebeat-2-log-sources/264827>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 19, 2021, 9:32am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827 "2021-02-19T09:32:06Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![grazia0912](https://avatars.discourse-cdn.com/v4/letter/g/34f0e0/32.png) [@grazia0912](https://discuss.elastic.co/u/grazia0912)\
**Post date:** [February 19, 2021, 9:32am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827/1 "2021-02-19T09:32:06Z")

</div>

Hi, i'm currently working with Filebeat and i would like to know if there is a way Filebeat gets logs from 1 remote Windows server then if the the server is down it will get logs automatically from a different server. I don't know if i am making any sense but any help would be very much appreciated cause i was trying to incorporate high availability on Filebeat so that there is no downtime on sending data in Elastic Search. Thank you very much.

---

<div class="post-metadata">

**Author:** ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)\
**Post date:** [February 19, 2021, 10:42am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827/2 "2021-02-19T10:42:31Z")

</div>

@grazia0912 welcome to discuss 🙂

What kind of logs are you interested on collecting from the Windows server?

If they are Windows Events take a look to Winlogbeat: [Winlogbeat Overview | Winlogbeat Reference [7.11] | Elastic](https://www.elastic.co/guide/en/beats/winlogbeat/7.11/_winlogbeat_overview.html)

If you can install Winlogbeat in your server, you can directly send its events to Elasticsearch. If not, you can use Windows Event Forwarding to send the events to another server where Winlogbeat can collect these logs.

---

<div class="post-metadata">

**Author:** ![grazia0912](https://avatars.discourse-cdn.com/v4/letter/g/34f0e0/32.png) [@grazia0912](https://discuss.elastic.co/u/grazia0912)\
**Post date:** [February 22, 2021, 3:18am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827/3 "2021-02-22T03:18:14Z")

</div>

Hi @jsoriano thank you for your response, my filebeat is collecting only from a .log file generated by my windows service.

---

<div class="post-metadata">

**Author:** ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)\
**Post date:** [February 22, 2021, 8:40am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827/4 "2021-02-22T08:40:11Z")

</div>

Then Filebeat is already sending the logs as soon as they are collected. There is little else it can do if the server goes down.  
Are you expecting logs to be sent "faster" in case the server goes down?  
Perhaps I am not understanding the problem 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 22, 2021, 10:40am UTC](https://discuss.elastic.co/t/filebeat-2-log-sources/264827/5 "2021-03-22T10:40:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.