# Help with storing logs on e:\\

**URL:** <https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401>\
**Category:** Logstash\
**Created:** [July 26, 2016, 1:34pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401 "2016-07-26T13:34:43Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![deepbrah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deepbrah/32/11068_2.png) [@deepbrah](https://discuss.elastic.co/u/deepbrah)\
**Post date:** [July 26, 2016, 1:34pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/1 "2016-07-26T13:34:43Z")

</div>

Hey all...Network guy here...I've got the ELK stack up and running on my test environment and everything is fine...

I've got the go ahead to put it in production -- where I have a 100GB HD for the OS and the services, and an external drive (E:\ in this case) where I want to store the log files.

Can someone kindly tell me how to set it up so all of the logs are stored on E:?

I've read some and investigated the files where someone said the log path was stored...but I found it a bit confusing (not a super systems guy here)...I'm running things on Windows Server if that matters.

Thanks so much!!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 27, 2016, 5:00am UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/2 "2016-07-27T05:00:57Z")

</div>

I assume you are storing the data in Elasticsearch, if so check out [https://www.elastic.co/guide/en/elasticsearch/reference/2.3/modules-node.html#data-path](https://www.elastic.co/guide/en/elasticsearch/reference/2.3/modules-node.html#data-path).

It's set in `elasticsearch.yml`.

---

<div class="post-metadata">

**Author:** ![deepbrah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deepbrah/32/11068_2.png) [@deepbrah](https://discuss.elastic.co/u/deepbrah)\
**Post date:** [July 27, 2016, 12:12pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/3 "2016-07-27T12:12:34Z")

</div>

Thanks so much @warkolm ! I'm going to have a question incoming...

So I have two lines in there:

## path.data: /path/to/data##

## path.logs: /path/to/logs##

From what the article is saying, the path.data I want to change...but to me, it looks like it's in 'linux' format.

Essentially, if i do the following:

## path.data: e:\elastdata##

That will put my data in that folder?

What about the path.logs -- sounds to me like logs are going to path.logs?

Thanks so much!

---

<div class="post-metadata">

**Author:** ![anhlqn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anhlqn/32/5454_2.png) [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Post date:** [July 27, 2016, 7:26pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/4 "2016-07-27T19:26:10Z")

</div>

Just set `path.data: E:/elastdata`. The `path.logs` is optional, logs will stay in ES installation folder

---

<div class="post-metadata">

**Author:** ![deepbrah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deepbrah/32/11068_2.png) [@deepbrah](https://discuss.elastic.co/u/deepbrah)\
**Post date:** [July 27, 2016, 7:38pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/5 "2016-07-27T19:38:45Z")

</div>

Alright, thanks so much. I'll try it in the morning...thanks a lot for the help.

---

<div class="post-metadata">

**Author:** ![deepbrah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deepbrah/32/11068_2.png) [@deepbrah](https://discuss.elastic.co/u/deepbrah)\
**Post date:** [July 28, 2016, 12:03pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/6 "2016-07-28T12:03:11Z")

</div>

I've changed the following:

path.data: e:\elas\data  
path.logs: e:\elas\logs

restarted the services, and the logs are not going to e:\

I then created the corresponding folders, restarted the services

and they are just empty folders.

Kibana is still showing new syslog information in the search...so the logs are just getting stored in the default location.

---

<div class="post-metadata">

**Author:** ![deepbrah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deepbrah/32/11068_2.png) [@deepbrah](https://discuss.elastic.co/u/deepbrah)\
**Post date:** [July 28, 2016, 12:56pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/7 "2016-07-28T12:56:46Z")

</div>

OK thanks -- I got it working.

Apparently editing in Windows Notepad.exe corrupts the YAML file.

So I replaced my configuration file with the new, default one.  
Used Notepad++ to edit the configuration this time  
Restarted the services  
and now it's working properly and storing logs on the e drive.

Going to add YAML to my resume 😉

---

<div class="post-metadata">

**Author:** ![anhlqn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anhlqn/32/5454_2.png) [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Post date:** [July 28, 2016, 4:29pm UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/8 "2016-07-28T16:29:02Z")

</div>

Stay away from the Windows notepad for most config files ^^. Glad to hear your ES is working now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:46am UTC](https://discuss.elastic.co/t/help-with-storing-logs-on-e/56401/9 "2017-07-06T04:46:06Z")

</div>


