Is there way to pull logs from remote Linux server instead of installing filebeat on the server and it pushes logs to logstash?

Rather than installing filebeat on each linux server and pushing the logs to logstash, I need some way to pull the logs from all linux servers having no need to install filebeat or any other plugin on the linux servers

Hi @bhagirath_h, welcome to the Elastic community forums!

Filebeat is meant to be a lightweight agent so it's intended to be installed on each host that's producing the logs.

However, if you'd rather not install Filebeat on your hosts, you could use something like syslog to push your logs from each host to Filebeat or Logstash instead. Filebeat has a syslog input, and so does Logstash. So you could use either to process the logs.

Shaunak

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.