# How To Archive Logs in Elasticsearch

**URL:** <https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452>\
**Category:** Elasticsearch\
**Created:** [April 4, 2019, 4:42pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452 "2019-04-04T16:42:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![savetom](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@savetom](https://discuss.elastic.co/u/savetom)\
**Post date:** [April 4, 2019, 4:42pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452/1 "2019-04-04T16:42:56Z")

</div>

Hi Everyone,

I am new to elastic stack so please bear with my ignorant questions.

Our company has been required to follow a Cybersecurity requirement and one of it's requirement is to have a centralized logging server. The logs from this server needs to be regularly archived and digitally signed. I just set up our elastic stack on ubuntu server. Right now, i've been collecting events using winlogbeats installed on our windows clients.

Can anybody tell me how to archive logs on elasticsearch? I would really appreciate if you can post a detailed step by step instruction on how to do it.

Thank you so much in advance!

---

<div class="post-metadata">

**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Post date:** [April 4, 2019, 4:47pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452/2 "2019-04-04T16:47:58Z")

</div>

I think elasticsearch by default rotates your log and zip it

This is what I see in our log dir.

\<cluster\_name\>-2019-04-03-1.log.gz

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2019, 4:48pm UTC](https://discuss.elastic.co/t/how-to-archive-logs-in-elasticsearch/175452/3 "2019-05-02T16:48:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
