# Filebeats (Beats) and Logstash Best Practices Deployment Architecture

**URL:** <https://discuss.elastic.co/t/filebeats-beats-and-logstash-best-practices-deployment-architecture/379511>\
**Category:** Logstash\
**Tags:** elastic-stack-security\
**Created:** [June 26, 2025, 8:49am UTC](https://discuss.elastic.co/t/filebeats-beats-and-logstash-best-practices-deployment-architecture/379511 "2025-06-26T08:49:53Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Matthew1](https://avatars.discourse-cdn.com/v4/letter/m/ed655f/32.png) [@Matthew1](https://discuss.elastic.co/u/Matthew1)\
**Post date:** [June 26, 2025, 8:49am UTC](https://discuss.elastic.co/t/filebeats-beats-and-logstash-best-practices-deployment-architecture/379511/1 "2025-06-26T08:49:53Z")

</div>

Hi Elastics Forum,

I am trying to Forward Network Device logs in CEF via syslog into 2 different logstash for HA (High Availabilty) and load balancing. I have check that It can use Filebeats with logstash ouput and loadbalancing true. I want to ask what is the Best Practices for deploying using the Filebeat as a loadbalance and logstash to process the logs.

Thank you