# How to read remote unix logs

**URL:** <https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470>\
**Category:** Logstash\
**Created:** [July 25, 2018, 2:13am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470 "2018-07-25T02:13:17Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![kavitajp](https://avatars.discourse-cdn.com/v4/letter/k/ecccb3/32.png) [@kavitajp](https://discuss.elastic.co/u/kavitajp)\
**Post date:** [July 25, 2018, 2:13am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/1 "2018-07-25T02:13:18Z")

</div>

Hi, i am new to ELK, can someone help me to get logs from remote unix server,i am using filebeat and logstash on my local windows machine.

Thanks,

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [July 25, 2018, 9:07am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/2 "2018-07-25T09:07:38Z")

</div>

Normally, folks put filebeat on the unix server. Make sure the unix server can connect to your windows machine over the network.

---

<div class="post-metadata">

**Author:** ![kavitajp](https://avatars.discourse-cdn.com/v4/letter/k/ecccb3/32.png) [@kavitajp](https://discuss.elastic.co/u/kavitajp)\
**Post date:** [July 25, 2018, 8:25pm UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/3 "2018-07-25T20:25:32Z")

</div>

Thank you for the reply, i can connect unix server from windows machine using putty,but using filebeat i am not sure how to pass username,password and host details.

thanks

---

<div class="post-metadata">

**Author:** ![Harshad\_Velapure](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshad_velapure/32/33684_2.png) [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\
**Post date:** [July 25, 2018, 8:34pm UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/4 "2018-07-25T20:34:30Z")

</div>

Hello,  
can you put filebeat on unix server?  
it will be easy to send unix server logs to logstash running on windows.

---

<div class="post-metadata">

**Author:** ![kavitajp](https://avatars.discourse-cdn.com/v4/letter/k/ecccb3/32.png) [@kavitajp](https://discuss.elastic.co/u/kavitajp)\
**Post date:** [July 26, 2018, 8:41pm UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/5 "2018-07-26T20:41:24Z")

</div>

hi harshad,

i can't put filebeat on unix server,could you please suggest me alternative.

thanks

---

<div class="post-metadata">

**Author:** ![Harshad\_Velapure](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshad_velapure/32/33684_2.png) [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\
**Post date:** [July 27, 2018, 9:59am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/6 "2018-07-27T09:59:20Z")

</div>

I found below conf on stackoverflow, please try this once

input {  
file {  
path =\> "\\IP address/home/Desktop/Logstash-Input/\*\*/\*\_log"  
start\_position =\> "beginning"  
}}

---

<div class="post-metadata">

**Author:** ![kavitajp](https://avatars.discourse-cdn.com/v4/letter/k/ecccb3/32.png) [@kavitajp](https://discuss.elastic.co/u/kavitajp)\
**Post date:** [July 29, 2018, 8:31pm UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/7 "2018-07-29T20:31:13Z")

</div>

Hi Harshad,

Thank you for the reply i tried in my logstash.conf which is in my windows machine but no luck,logs are not transferring to kibana.

thank you

---

<div class="post-metadata">

**Author:** ![Harshad\_Velapure](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshad_velapure/32/33684_2.png) [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\
**Post date:** [July 29, 2018, 8:33pm UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/8 "2018-07-29T20:33:35Z")

</div>

Hello @kavitajp  
sorry for late reply earlier, can you please share your configs of filebeat and logstash  
I haven't done this before with windows system, I will reproduce this scenario and let you know.

Also is it possible to mount common drive in between unix and windows server where logs are located !?

---

<div class="post-metadata">

**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\
**Post date:** [July 30, 2018, 12:12am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/9 "2018-07-30T00:12:11Z")

</div>

Could you share some more info on the Unix server? What kind of logs are you trying to collect? Could you log locally to the syslogd on the Unix server and have that forward the logs to logstash?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 27, 2018, 12:12am UTC](https://discuss.elastic.co/t/how-to-read-remote-unix-logs/141470/10 "2018-08-27T00:12:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
