# How to send wazuh logs to elastic trough logstash

**URL:** <https://discuss.elastic.co/t/how-to-send-wazuh-logs-to-elastic-trough-logstash/363750>\
**Category:** Logstash\
**Created:** [July 25, 2024, 12:32am UTC](https://discuss.elastic.co/t/how-to-send-wazuh-logs-to-elastic-trough-logstash/363750 "2024-07-25T00:32:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Felipe\_Medina](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felipe_medina/32/125629_2.png) [@Felipe\_Medina](https://discuss.elastic.co/u/Felipe_Medina)\
**Post date:** [July 25, 2024, 12:32am UTC](https://discuss.elastic.co/t/how-to-send-wazuh-logs-to-elastic-trough-logstash/363750/1 "2024-07-25T00:32:56Z")

</div>

Hi  
I want to sent wazug logs to elastic  
I found this documentation:  
But, when I execute the following command to verify my logstash configuration, I obtain errors:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/9/79b085df3242231a7f2d2bf5972d926f147556e8.png)  
Can someone help me?  
Thank you

---

<div class="post-metadata">

**Author:** ![Felipe\_Medina](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felipe_medina/32/125629_2.png) [@Felipe\_Medina](https://discuss.elastic.co/u/Felipe_Medina)\
**Post date:** [July 25, 2024, 12:33am UTC](https://discuss.elastic.co/t/how-to-send-wazuh-logs-to-elastic-trough-logstash/363750/2 "2024-07-25T00:33:53Z")

</div>

This is my configuration

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/a/da7dd0d59bd1b17d338f9ebadf08aefe10157079.png)

---

<div class="post-metadata">

**Author:** ![Musab\_Dogan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/musab_dogan/32/70691_2.png) [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Post date:** [July 28, 2024, 11:17pm UTC](https://discuss.elastic.co/t/how-to-send-wazuh-logs-to-elastic-trough-logstash/363750/3 "2024-07-28T23:17:40Z")

</div>

The error logs refers there is a problem with `/etc/logstash/templates/wazuh,json`. Please check `wazuh.json` is exist, and make sure it's a proper JSON file. Also, there can be a file permission issue.

Note: Please share your question as **text** instead of **screenshots** to make it findable for others.