# Filebeat vs logstash

**URL:** https://discuss.elastic.co/t/filebeat-vs-logstash/321613
**Category:** Elasticsearch
**Created:** [December 20, 2022, 6:30am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613 "2022-12-20T06:30:11Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Indeed2000](https://avatars.discourse-cdn.com/v4/letter/i/dc4da7/32.png) [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)
#### Post date: [December 20, 2022, 6:30am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613/1 "2022-12-20T06:30:11Z")

</div>

Hi  
Need to send logs in this path /var/log/\* on a client to elastic server.  
which one more suitable for me? filebeat or logstash?

there are lots of log exist in this path with different name, I want to able to filter logs by name in kibana too (the same name as in the source)

need both search through aggregated logs or specific logs by name that exist in client.

Any idea?  
Thanks

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 20, 2022, 9:09am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613/2 "2022-12-20T09:09:57Z")

</div>

I'd use Filebeat.

---

<div class="post-metadata">

### Author: ![dadiasish](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadiasish/32/114221_2.png) [@dadiasish](https://discuss.elastic.co/u/dadiasish)
#### Post date: [December 20, 2022, 9:12am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613/3 "2022-12-20T09:12:00Z")

</div>

Filebeat is the best possible way to pick your logs and send to Elasticsearch.

If your logs are structured, then you can directly send them to Elasticsearch. If not, then you can send logs via logstash for processing and then send them to Elasticsearch.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 17, 2023, 9:12am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613/4 "2023-01-17T09:12:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
