# How to setup a connection between VMs and ELK? **URL:** \ **Category:** Elasticsearch\ **Created:** [March 25, 2015, 5:32pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899 "2015-03-25T17:32:49Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![kelnrluierhfeulne](https://avatars.discourse-cdn.com/v4/letter/k/b77776/32.png) [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\ **Post date:** [March 25, 2015, 5:32pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/1 "2015-03-25T17:32:49Z")
This is a beginner question but how would you get virtual machines to connect to ELK so you can see the logs of those VMs on Kibana? Is there a place to input the IP of the VMs so it is displayed in Kibana? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 25, 2015, 8:21pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/2 "2015-03-25T20:21:44Z")
You need to ship the logs from the VMs to ES. Take a look at Logstash and feel free to ask questions on [https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users](https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users) On 26 March 2015 at 04:32, kelnrluierhfeulne [dmch12345@gmail.com](mailto:dmch12345@gmail.com) wrote: > This is a beginner question but how would you get virtual machines to > connect to ELK so you can see the logs of those VMs on Kibana? Is there a > place to input the IP of the VMs so it is displayed in Kibana? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-qkv-vVTH53X%3DZiLeR\_K5atPcm33c%2B%2BxXvFw7U%2BwBh5g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X-qkv-vVTH53X%3DZiLeR_K5atPcm33c%2B%2BxXvFw7U%2BwBh5g%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![kelnrluierhfeulne](https://avatars.discourse-cdn.com/v4/letter/k/b77776/32.png) [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\ **Post date:** [March 25, 2015, 8:47pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/3 "2015-03-25T20:47:19Z")
Hey thanks for the reply! I tried looking up how to do that but am still lost... Would you happen to know what commands you would use to ship the VM's logs to elasticsearch? On Wednesday, March 25, 2015 at 4:22:11 PM UTC-4, Mark Walkom wrote: > You need to ship the logs from the VMs to ES. > > Take a look at Logstash and feel free to ask questions on > [Redirecting to Google Groups](https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users) > > On 26 March 2015 at 04:32, kelnrluierhfeulne \<[dmch...@gmail.com](mailto:dmch...@gmail.com) > \\> wrote: > > > This is a beginner question but how would you get virtual machines to > > connect to ELK so you can see the logs of those VMs on Kibana? Is there a > > place to input the IP of the VMs so it is displayed in Kibana? > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 25, 2015, 9:30pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/4 "2015-03-25T21:30:20Z")
There is no single command, it's a concept. You can use rsyslog, logstash, logstash-forwarder, logstash-courier or many other pieces of software to do this. On 26 March 2015 at 07:47, kelnrluierhfeulne [dmch12345@gmail.com](mailto:dmch12345@gmail.com) wrote: > Hey thanks for the reply! I tried looking up how to do that but am still > lost... Would you happen to know what commands you would use to ship the > VM's logs to elasticsearch? > > On Wednesday, March 25, 2015 at 4:22:11 PM UTC-4, Mark Walkom wrote: > > > You need to ship the logs from the VMs to ES. > > > > Take a look at Logstash and feel free to ask questions on > > [Redirecting to Google Groups](https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users) > > > > On 26 March 2015 at 04:32, kelnrluierhfeulne [dmch...@gmail.com](mailto:dmch...@gmail.com) wrote: > > > > > This is a beginner question but how would you get virtual machines to > > > connect to ELK so you can see the logs of those VMs on Kibana? Is there a > > > place to input the IP of the VMs so it is displayed in Kibana? > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa% > > > [40googlegroups.com](http://40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X\_5d9HAuYZXU\_VanenS\_WiFbpZY7H-vum%2Bpq48x3X7Q4g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X_5d9HAuYZXU_VanenS_WiFbpZY7H-vum%2Bpq48x3X7Q4g%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![kelnrluierhfeulne](https://avatars.discourse-cdn.com/v4/letter/k/b77776/32.png) [@kelnrluierhfeulne](https://discuss.elastic.co/u/kelnrluierhfeulne)\ **Post date:** [March 26, 2015, 1:10pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/5 "2015-03-26T13:10:32Z")
Would you happen to know what the process is or know of any links that go over the concept that allow you to do this? For example, is there a certain file to edit once you download logstash-forwarder? Thanks again On Wednesday, March 25, 2015 at 5:30:53 PM UTC-4, Mark Walkom wrote: > There is no single command, it's a concept. > > You can use rsyslog, logstash, logstash-forwarder, logstash-courier or > many other pieces of software to do this. > > On 26 March 2015 at 07:47, kelnrluierhfeulne \<[dmch...@gmail.com](mailto:dmch...@gmail.com) > \\> wrote: > > > Hey thanks for the reply! I tried looking up how to do that but am still > > lost... Would you happen to know what commands you would use to ship the > > VM's logs to elasticsearch? > > > > On Wednesday, March 25, 2015 at 4:22:11 PM UTC-4, Mark Walkom wrote: > > > > > You need to ship the logs from the VMs to ES. > > > > > > Take a look at Logstash and feel free to ask questions on > > > [Redirecting to Google Groups](https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users) > > > > > > On 26 March 2015 at 04:32, kelnrluierhfeulne [dmch...@gmail.com](mailto:dmch...@gmail.com) wrote: > > > > > > > This is a beginner question but how would you get virtual machines to > > > > connect to ELK so you can see the logs of those VMs on Kibana? Is there a > > > > place to input the IP of the VMs so it is displayed in Kibana? > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "elasticsearch" group. > > > To unsubscribe from this group and stop receiving emails from it, send an > > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > > To view this discussion on the web visit > > > [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com) > > > [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm_medium=email&utm_source=footer) > > > . > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [March 26, 2015, 9:01pm UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/6 "2015-03-26T21:01:04Z")
> **[Google](https://www.google.com.au/?gws_rd=ssl#q=elk+tutorial)** > > Happy Holidays! #GoogleDoodle There's a whole bunch of links there to get you started. On 27 March 2015 at 00:10, kelnrluierhfeulne [dmch12345@gmail.com](mailto:dmch12345@gmail.com) wrote: > Would you happen to know what the process is or know of any links that go > over the concept that allow you to do this? For example, is there a certain > file to edit once you download logstash-forwarder? > Thanks again > > On Wednesday, March 25, 2015 at 5:30:53 PM UTC-4, Mark Walkom wrote: > > > There is no single command, it's a concept. > > > > You can use rsyslog, logstash, logstash-forwarder, logstash-courier or > > many other pieces of software to do this. > > > > On 26 March 2015 at 07:47, kelnrluierhfeulne [dmch...@gmail.com](mailto:dmch...@gmail.com) wrote: > > > > > Hey thanks for the reply! I tried looking up how to do that but am still > > > lost... Would you happen to know what commands you would use to ship the > > > VM's logs to elasticsearch? > > > > > > On Wednesday, March 25, 2015 at 4:22:11 PM UTC-4, Mark Walkom wrote: > > > > > > > You need to ship the logs from the VMs to ES. > > > > > > > > Take a look at Logstash and feel free to ask questions on > > > > [Redirecting to Google Groups](https://groups.google.com/forum/?hl=en-GB#!forum/logstash-users) > > > > > > > > On 26 March 2015 at 04:32, kelnrluierhfeulne [dmch...@gmail.com](mailto:dmch...@gmail.com) wrote: > > > > > > > > > This is a beginner question but how would you get virtual machines to > > > > > connect to ELK so you can see the logs of those VMs on Kibana? Is there a > > > > > place to input the IP of the VMs so it is displayed in Kibana? > > > > > > > > > > -- > > > > > You received this message because you are subscribed to the Google > > > > > Groups "elasticsearch" group. > > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > > msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40goo > > > > > [glegroups.com](http://glegroups.com) > > > > > [https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/54e04ffa-9bec-4c99-954c-f0a866454faa%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > > . > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > > > > Groups "elasticsearch" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > > > > an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > > > msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822% > > > > [40googlegroups.com](http://40googlegroups.com) > > > > [https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/15f4ff6d-6eb6-46de-ad0b-c8046bb8c822%40googlegroups.com?utm_medium=email&utm_source=footer) > > > > . > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/daf2a092-2ca0-4cdf-be1c-3c12984436d7%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9FSmpeAakOpjM4x8DAWFbyK4jZcdDgXKuvHBM8\_9JxJQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9FSmpeAakOpjM4x8DAWFbyK4jZcdDgXKuvHBM8_9JxJQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:23am UTC](https://discuss.elastic.co/t/how-to-setup-a-connection-between-vms-and-elk/22899/7 "2017-07-06T00:23:35Z")