# Importing teamviewer logs getting started

**URL:** <https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176>\
**Category:** Logstash\
**Created:** [December 26, 2018, 9:30pm UTC](https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176 "2018-12-26T21:30:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![JB\_Pollard](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jb_pollard/32/45345_2.png) [@JB\_Pollard](https://discuss.elastic.co/u/JB_Pollard)\
**Post date:** [December 26, 2018, 9:30pm UTC](https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176/1 "2018-12-26T21:30:50Z")

</div>

Just need a little direction just got everything installed and trying to read through the documentation. I want to import teamviewer logs into logstash and then get it to kibana. They way I understand it is filebeat is just what sends the fileover to logstash if its a remote server. So if it's located locally I can just input the file directly into logstash "Which i what I am attempting now". So In logstash would I use the logstash-simple.conf or logstash.json file? Once that's configured how would I find these logs in kibana?

Here's what I have added to the logstash-simple.conf

```
input { stdin { } 
  file {
    path => "C:/Program Files (x86)/TeamViewer/TeamViewer11_Logfile.log"
    type => "teamviewer" # a type to identify those logs (will need this later)
    start_position => "beginning"
}
output {
  elasticsearch { hosts => ["localhost:9200"] }
  stdout { codec => rubydebug }
}

```

Operating System Windows Server 2012 R2  
ELK Version 6.5.4

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 26, 2018, 9:33pm UTC](https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176/2 "2018-12-26T21:33:23Z")

</div>

> [@JB\_Pollard](#):
>
> They way I understand it is filebeat is just what sends the fileover to logstash if its a remote server

Or it can send directly to Elasticsearch.

> [@JB\_Pollard](#):
>
> So In logstash would I use the logstash-simple.conf or logstash.json file?

Use the `.conf` files. (Not sure where you got the json one from?)

---

<div class="post-metadata">

**Author:** ![JB\_Pollard](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jb_pollard/32/45345_2.png) [@JB\_Pollard](https://discuss.elastic.co/u/JB_Pollard)\
**Post date:** [December 27, 2018, 4:25am UTC](https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176/3 "2018-12-27T04:25:37Z")

</div>

I was following this tutorial

> **[ELK STACK ON WINDOWS SERVER — PART 2 — INSTALLATION](https://medium.com/@samil.mehdiyev/elk-stack-on-windows-server-part-2-installation-d2a7200b65a6)**
>
> In Part 1, we spoke about ELK Stack commonly. In this post, we will go through the ELK Stack installation process on Windows Server 2012 R2…

> **THIRD STEP** : Installing Logstash.
> 
> 1. Before installing Logstash, you will need to create a “logstash.json” configuration file in the bin folder inside an unzipped Logstash folder. (in my case: C:\ELK\logstash\bin)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 24, 2019, 4:25am UTC](https://discuss.elastic.co/t/importing-teamviewer-logs-getting-started/162176/4 "2019-01-24T04:25:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.