# FileBeats Syslog not being sent to Elastic Cloud

**URL:** <https://discuss.elastic.co/t/filebeats-syslog-not-being-sent-to-elastic-cloud/295300>\
**Category:** Beats\
**Tags:** filebeat, elastic-agent\
**Created:** [January 25, 2022, 4:43am UTC](https://discuss.elastic.co/t/filebeats-syslog-not-being-sent-to-elastic-cloud/295300 "2022-01-25T04:43:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wekimop](https://avatars.discourse-cdn.com/v4/letter/w/a3d4f5/32.png) [@wekimop](https://discuss.elastic.co/u/wekimop)\
**Post date:** [January 25, 2022, 4:43am UTC](https://discuss.elastic.co/t/filebeats-syslog-not-being-sent-to-elastic-cloud/295300/1 "2022-01-25T04:43:11Z")

</div>

Hello, i am trying to use the System integration in my Elastic Security agent to capture syslog data from /var/log/syslog file. I am also doing the same on another server but using a FileBeat instance, sending output to the Elastic Cloud. But for both deployments (the one using Elastic agent and the other one using FileBeats) I am only able to send syslog logs that were generated by the local servers where agent and FileBeats are installed. If I receive external log from another Linux server, even with it being correctly written to the monitored file (/var/log/syslog), this log is never seen at Discovery console in the Elastic Cloud. Only syslog data where the host (in syslog header) is the same as the original server where FileBeats or Agent are installed, in other words, only logs generated locally by the servers themselvs are being sent. Any help how to solve this? Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 22, 2022, 4:43am UTC](https://discuss.elastic.co/t/filebeats-syslog-not-being-sent-to-elastic-cloud/295300/2 "2022-02-22T04:43:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
