# Filebeat output logtsah protocol?

**URL:** https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125
**Category:** Beats
**Tags:** filebeat
**Created:** [December 6, 2016, 5:27am UTC](https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125 "2016-12-06T05:27:25Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)
#### Post date: [December 6, 2016, 5:27am UTC](https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125/1 "2016-12-06T05:27:25Z")

</div>

Hi,  
Its known thing that filebeat doesn't use http protocol when it uses logstash as an output plugin.  
Then what protocol does it use? Is it lumberjack only?

br,  
Sunil

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [December 6, 2016, 6:28am UTC](https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125/2 "2016-12-06T06:28:28Z")

</div>

From what I gather the Beats protocol is an evolution of the Lumberjack protocol.

---

<div class="post-metadata">

### Author: ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [December 6, 2016, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125/3 "2016-12-06T12:40:18Z")

</div>

> From what I gather the Beats protocol is an evolution of the Lumberjack protocol.

Right. It's still lumberjack, but v2.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 3, 2017, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-output-logtsah-protocol/68125/4 "2017-01-03T12:40:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
