# Importing Historical Log Data

**URL:** <https://discuss.elastic.co/t/importing-historical-log-data/241913>\
**Category:** Logstash\
**Created:** [July 20, 2020, 3:25pm UTC](https://discuss.elastic.co/t/importing-historical-log-data/241913 "2020-07-20T15:25:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![phinkel](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@phinkel](https://discuss.elastic.co/u/phinkel)\
**Post date:** [July 20, 2020, 3:25pm UTC](https://discuss.elastic.co/t/importing-historical-log-data/241913/1 "2020-07-20T15:25:50Z")

</div>

Hello currently we are transitioning to Elastic from LogRhythm SIEM. The current logs from LR are in .LCA format. Due to compliance reasons we will need to have access to this historical log data. I assume as LR is built on elastic the logs should be able to be transferred to the elastic SIEM. What can I do to import these logs? Is this possible?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 20, 2020, 11:41pm UTC](https://discuss.elastic.co/t/importing-historical-log-data/241913/2 "2020-07-20T23:41:58Z")

</div>

If the `.LCA` files are plain text, you can use Filebeat or Logstash to import them.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 17, 2020, 11:41pm UTC](https://discuss.elastic.co/t/importing-historical-log-data/241913/3 "2020-08-17T23:41:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.