# Filebeat - Multiple server instance configuration

**URL:** <https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 26, 2017, 1:29pm UTC](https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825 "2017-06-26T13:29:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![blackOcean](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/blackocean/32/19722_2.png) [@blackOcean](https://discuss.elastic.co/u/blackOcean)\
**Post date:** [June 26, 2017, 1:29pm UTC](https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825/1 "2017-06-26T13:29:19Z")

</div>

I did configure the Elastic Stack (Logstash + Elastic search + Kibana ) with filebeat. So my question is I have multiple servers where I deployed my application instances (Microservices applications ). I want to capture logs from all the servers but for that I have to install filebeat in each server. Is it the correct understanding ? or Can we configure something like that single filebeat instance able to fetch logs from all the servers (Servers can be same network) and send logs over TCP or any protocol ?

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [June 27, 2017, 8:06am UTC](https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825/2 "2017-06-27T08:06:41Z")

</div>

filebeat tails log files, and forwards lines to Logstash or Elasticsearch. It's not recommended to use filebeat with network shares to collect logs from multiple servers (Network shares often introduce problems, like network loss, out of order 'commits' and other...). Alternatively to using filebeat, you can have your servers/applications directly send logs to Logstash (via TCP, HTTP, syslog, fluentd protocol, ...)

---

<div class="post-metadata">

**Author:** ![blackOcean](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/blackocean/32/19722_2.png) [@blackOcean](https://discuss.elastic.co/u/blackOcean)\
**Post date:** [June 30, 2017, 8:30am UTC](https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825/3 "2017-06-30T08:30:40Z")

</div>

Thanks @steffens.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2017, 8:30am UTC](https://discuss.elastic.co/t/filebeat-multiple-server-instance-configuration/90825/4 "2017-07-28T08:30:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.