# How do I receive logs from a Cisco device?

**URL:** <https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723>\
**Category:** Elastic Agent\
**Tags:** filebeat\
**Created:** [May 17, 2024, 2:53pm UTC](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723 "2024-05-17T14:53:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jreyes25](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@jreyes25](https://discuss.elastic.co/u/jreyes25)\
**Post date:** [May 17, 2024, 2:53pm UTC](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723/1 "2024-05-17T14:53:11Z")

</div>

Hello,

I'm trying to see how to configure elasticstack to receive logs from cisco devices. I see in the Integrations for 'Cisco Logs' and says to configure the output.elasticsearch section of the filebeat.yml file then enable the Cisco module.

I have setup a fleet-server to manage the elastic-agents centrally and I'm receiving logs currently from the agents. So do I configure the filebeat.yml inside the elastic-agent directory (in my case it's /var/lib/elastic-agent/data/elastic-agent-de80b0/components/filebeat.yml)? And then have the cisco switch send the logs to that host IP? T.I.A.

---

<div class="post-metadata">

**Author:** ![jreyes25](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@jreyes25](https://discuss.elastic.co/u/jreyes25)\
**Post date:** [May 17, 2024, 6:04pm UTC](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723/2 "2024-05-17T18:04:40Z")

</div>

Disregard. I installed the Cisco IOS integration and specified the host ip and port and started receiving logs.

---

<div class="post-metadata">

**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\
**Post date:** [May 20, 2024, 12:58pm UTC](https://discuss.elastic.co/t/how-do-i-receive-logs-from-a-cisco-device/359723/3 "2024-05-20T12:58:22Z")

</div>

Thanks for sharing your solution, @jreyes25.
