# Filebeats to Elasticsearch **URL:** \ **Category:** Beats\ **Created:** [July 25, 2019, 9:36am UTC](https://discuss.elastic.co/t/filebeats-to-elasticsearch/192211 "2019-07-25T09:36:46Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![sarban.kumar](https://avatars.discourse-cdn.com/v4/letter/s/a3d4f5/32.png) [@sarban.kumar](https://discuss.elastic.co/u/sarban.kumar)\ **Post date:** [July 25, 2019, 9:36am UTC](https://discuss.elastic.co/t/filebeats-to-elasticsearch/192211/1 "2019-07-25T09:36:46Z")
Hi All - I'm new on elasticsearch. We do have got requirment for log analysis for networks devices log , we are getting all the logs in one syslog server and installed filebeat on same server sending logs to elastic , but how to parse the message like below which is from Fortinate network devices. Any help suggestion/idea apprciated. Starting from Fortinate later on few more network verndors log we need to perform. **Jul 23 09:50:08 s1faz-adm.fmss.gov.ie logver=54 dtime=1563875405 devid=FG100E4Q17009534 devname=s1fw-cluster-in vd=INTERNAL-FW date=2019-07-23 time=09:50:05 logid=0000000013 type=traffic subtype=forward level=notice srcip=10.20.20.200 srcport=64750 srcintf="vpn\_dc2" dstip=192.168.111.14 dstport=514 dstintf="port7.760" poluuid=2cd8f57c-2f78-51e9-92db-d8e8bf1974f6 sessionid=999197142 proto=17 action=accept policyid=75 policytype=policy dstcountry="Reserved" srccountry="Reserved" trandisp=noop service="SYSLOG" duration=180 sentbyte=257 rcvdbyte=0 sentpkt=1 rcvdpkt=0 appcat="unscanned"** ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 22, 2019, 11:45am UTC](https://discuss.elastic.co/t/filebeats-to-elasticsearch/192211/2 "2019-08-22T11:45:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.