# How to extract all log sources in ELK? **URL:** \ **Category:** Elasticsearch\ **Created:** [May 24, 2023, 8:30am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188 "2023-05-24T08:30:31Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![UP\_NEWS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/up_news/32/121369_2.png) [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\ **Post date:** [May 24, 2023, 8:30am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/1 "2023-05-24T08:30:31Z")
Hi team, I'm new in elastic stack , please i need a procedure how to extract all the source logs IP and status if possible, for example i have 10 servers linux redhat integrated in elastic with auditbeat and i have 10 windows integrated with winlogbeat how to extract all this servers with hostname and status with last event. Thanks in advance ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [May 24, 2023, 10:07am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/2 "2023-05-24T10:07:05Z")
Hi @UP_NEWS, Is there a particular format you're looking to export it into? One possible way is to query the dataset in the **Discover** app in Kibana and either share the link or export to CSV: ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/c/6c6c59e6d02830d70a68e73f71b20c606bcecfbc.png) ---
**Author:** ![UP\_NEWS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/up_news/32/121369_2.png) [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\ **Post date:** [May 24, 2023, 3:54pm UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/3 "2023-05-24T15:54:10Z")
i don't need to export data i need to extract IP of servers integrated in ELK and their status if possible. ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [May 24, 2023, 4:04pm UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/4 "2023-05-24T16:04:56Z")
What do you mean by extract? ---
**Author:** ![UP\_NEWS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/up_news/32/121369_2.png) [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\ **Post date:** [May 25, 2023, 8:27am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/5 "2023-05-25T08:27:27Z")
GET all ips adress for endpoints like : pc /switch / servers ... without logs only IP and time of last event ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [May 25, 2023, 8:46am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/6 "2023-05-25T08:46:40Z")
You should be able to use Discover to see the data you need by selecting the relevant columns (i.e. ip and @timestamp) and the time range that you are interested in within the datepicker: ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/8/48cd4ca454298f8e362f5bca2be35dcfda41a05f.png) That will show only the fields in your document that you want to see. ---
**Author:** ![UP\_NEWS](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/up_news/32/121369_2.png) [@UP\_NEWS](https://discuss.elastic.co/u/UP_NEWS)\ **Post date:** [May 25, 2023, 9:45am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/7 "2023-05-25T09:45:41Z")
Thanks a lot @carly.richmond ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 22, 2023, 9:46am UTC](https://discuss.elastic.co/t/how-to-extract-all-log-sources-in-elk/334188/8 "2023-06-22T09:46:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.