# Ingest .sqlaudit logs to Elasticsearch

**URL:** <https://discuss.elastic.co/t/ingest-sqlaudit-logs-to-elasticsearch/363998>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 29, 2024, 3:43pm UTC](https://discuss.elastic.co/t/ingest-sqlaudit-logs-to-elasticsearch/363998 "2024-07-29T15:43:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sanju1323](https://avatars.discourse-cdn.com/v4/letter/s/5daacb/32.png) [@sanju1323](https://discuss.elastic.co/u/sanju1323)\
**Post date:** [July 29, 2024, 3:43pm UTC](https://discuss.elastic.co/t/ingest-sqlaudit-logs-to-elasticsearch/363998/1 "2024-07-29T15:43:01Z")

</div>

Hi Team,

We are trying to ingest the mssql logs (.sqlaudit format) using filebeat (Version 7.16.2). But we are not able to read the logs. Can someone let us know what is the best way to pull the mssql logs and ingest in Elasticsearch.

Thanks,  
Sanjay Reddy M.

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [August 1, 2024, 7:13am UTC](https://discuss.elastic.co/t/ingest-sqlaudit-logs-to-elasticsearch/363998/2 "2024-08-01T07:13:14Z")

</div>

Hi @sanju1323, The best way is to use [Microsoft SQL Server](https://www.elastic.co/docs/current/integrations/microsoft_sqlserver) integration.

You need to install Elastic agent. It will read all logs and push to Elasticsearch.

---

<div class="post-metadata">

**Author:** ![sanju1323](https://avatars.discourse-cdn.com/v4/letter/s/5daacb/32.png) [@sanju1323](https://discuss.elastic.co/u/sanju1323)\
**Post date:** [August 1, 2024, 8:49am UTC](https://discuss.elastic.co/t/ingest-sqlaudit-logs-to-elasticsearch/363998/3 "2024-08-01T08:49:47Z")

</div>

Hi @ashishtiwari1993,

Thanks for your response.  
I'm using Elastic 7.16.2 version and I have a dependency on my application.

Can I use the Elastic agent for 7.16.2 version?

Thanks.
