# How to add MikroTik router in ELK v7

**URL:** <https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507>\
**Category:** Logstash\
**Created:** [September 21, 2019, 2:29am UTC](https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507 "2019-09-21T02:29:17Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![lokmanopt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lokmanopt/32/54640_2.png) [@lokmanopt](https://discuss.elastic.co/u/lokmanopt)\
**Post date:** [September 21, 2019, 2:29am UTC](https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507/1 "2019-09-21T02:29:17Z")

</div>

Hello Dear,  
Hope you are well,  
I want to add MikroTik router all event log in to the ELK v7, already i added some Linux machine, They are working fine. Please give me some advice how to add MikroTik router in ELK v7. if some document are available please share with me. That Would be very helpful for me.

# Logstash configuration is below

vim /etc/logstash/conf.d/01-logstash-simple.conf

input {  
beats {  
port =\> 5044  
ssl =\> true  
ssl\_certificate =\> "/etc/pki/tls/certs/logstash.crt"  
ssl\_key =\> "/etc/pki/tls/private/logstash.key"  
}  
}

filter {  
if [type] == "syslog" {  
grok {  
match =\> {  
"message" =\> "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{SYSLOGHOST:syslog\_hostname} %{DATA:syslog\_program}(?:[%{POSINT:syslog\_pid}])?: %{GREEDYDATA:syslog\_message}"  
}  
add\_field =\> ["received\_at", "%{@timestamp}"]  
add\_field =\> ["received\_from", "%{host}"]  
}  
syslog\_pri { }  
date {  
match =\> ["syslog\_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]  
}  
}  
}

output {  
elasticsearch {  
hosts =\> "localhost:9200"  
index =\> "%{[@metadata][beat]}-%{+YYYY.MM.dd}"  
}  
}

**Note:** if I have need to change in this configure please advice me.

![ELK](https://us1.discourse-cdn.com/elastic/original/3X/8/a/8a64ec026da2e096227ad99974e9beda34f8de76.jpeg) ![MKTR](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d6a6ddaa4017acc19884a33b8eb94b8f3f6e4a1.jpeg)

Regards,  
Lokman Hakim

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 19, 2019, 2:29am UTC](https://discuss.elastic.co/t/how-to-add-mikrotik-router-in-elk-v7/200507/2 "2019-10-19T02:29:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.