# Importing logs using metricbeat

**URL:** https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793
**Category:** Beats
**Tags:** metricbeat
**Created:** [February 11, 2019, 5:53am UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793 "2019-02-11T05:53:27Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [February 11, 2019, 5:53am UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/1 "2019-02-11T05:53:28Z")

</div>

Hi i am new to elk....can someone help me what if I disable the logstash output and enable elasticsearch output in metricbeat.yml while importing data from different servers using metricbeat?

---

<div class="post-metadata">

### Author: ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [February 11, 2019, 2:23pm UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/2 "2019-02-11T14:23:44Z")

</div>

Hi @Vikash_Singh1 🙂

I'm afraid I don't understand the question well. You can either configure output to Elasticsearch or to Logstash and you can do it with Metricbeat, yes, from different servers. [https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-getting-started.html](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-getting-started.html)

In any case, reading the title of your question, logs must be imported with Filebeat [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html)

---

<div class="post-metadata">

### Author: ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [February 12, 2019, 6:08am UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/3 "2019-02-12T06:08:21Z")

</div>

can we create filters while importing logs from elasticsearch??

---

<div class="post-metadata">

### Author: ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [February 12, 2019, 9:23am UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/4 "2019-02-12T09:23:00Z")

</div>

Hi @Vikash_Singh1

Still the question is a bit confusing because this is the forum for Metricbeat so we it's expected to receive metrics questions.

If you are working with logs, you should look at Filebeat but, in any case, if you want to extract logs FROM Elasticsearch while creating filters, that's just plain querying to Elasticsearch [https://www.elastic.co/guide/en/elasticsearch/reference/current/search-search.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-search.html) without involving Metricbeat or Filebeat.

If what you want is to import logs TO Elasticsearch and perform some filtering to them, then you should look at Logstash [https://www.elastic.co/products/logstash](https://www.elastic.co/products/logstash) or the Ingest Node [https://www.elastic.co/products/logstash](https://www.elastic.co/products/logstash)

---

<div class="post-metadata">

### Author: ![Vikash\_Singh1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikash_singh1/32/42119_2.png) [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [February 14, 2019, 11:11am UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/5 "2019-02-14T11:11:41Z")

</div>

How can I write/define filters for metricbeat?

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [February 14, 2019, 4:07pm UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/6 "2019-02-14T16:07:18Z")

</div>

[https://www.elastic.co/guide/en/beats/metricbeat/current/filtering-and-enhancing-data.html](https://www.elastic.co/guide/en/beats/metricbeat/current/filtering-and-enhancing-data.html)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 14, 2019, 4:07pm UTC](https://discuss.elastic.co/t/importing-logs-using-metricbeat/167793/7 "2019-03-14T16:07:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
