How to ship data from one server to other using auditbeat

Elastic Stack Beats
1

Hello Team,

i am using Auditbeat on windows r2 server, my ELK stack setup is like Elasticsearch,kibana and logstash on same server with Auditbeat ( No clusturing ) .

now i want logs from a different server using auditbeat so how to do that ? i want to just install auditbeat on other server and ship log in to my r2 server, so in auditbeat.yaml where do i need to change ?

Thank you,
Anjli

2

You just need to install the beat and then change the config to send it to the Elasticsearch server, https://www.elastic.co/guide/en/beats/auditbeat/current/elasticsearch-output.html

3

Hello @warkolm,

i did the same it's working !!

Thank you

1 Like