# Is there way to pull logs from remote Linux server instead of installing filebeat on the server and it pushes logs to logstash?

**URL:** <https://discuss.elastic.co/t/is-there-way-to-pull-logs-from-remote-linux-server-instead-of-installing-filebeat-on-the-server-and-it-pushes-logs-to-logstash/228868>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 20, 2020, 1:11pm UTC](https://discuss.elastic.co/t/is-there-way-to-pull-logs-from-remote-linux-server-instead-of-installing-filebeat-on-the-server-and-it-pushes-logs-to-logstash/228868 "2020-04-20T13:11:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bhagirath\_h](https://avatars.discourse-cdn.com/v4/letter/b/bbce88/32.png) [@bhagirath\_h](https://discuss.elastic.co/u/bhagirath_h)\
**Post date:** [April 20, 2020, 1:11pm UTC](https://discuss.elastic.co/t/is-there-way-to-pull-logs-from-remote-linux-server-instead-of-installing-filebeat-on-the-server-and-it-pushes-logs-to-logstash/228868/1 "2020-04-20T13:11:15Z")

</div>

Rather than installing filebeat on each linux server and pushing the logs to logstash, I need some way to pull the logs from all linux servers having no need to install filebeat or any other plugin on the linux servers

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [April 20, 2020, 3:09pm UTC](https://discuss.elastic.co/t/is-there-way-to-pull-logs-from-remote-linux-server-instead-of-installing-filebeat-on-the-server-and-it-pushes-logs-to-logstash/228868/2 "2020-04-20T15:09:23Z")

</div>

Hi @bhagirath_h, welcome to the Elastic community forums!

Filebeat is meant to be a lightweight **agent** so it's intended to be installed on each host that's producing the logs.

However, if you'd rather not install Filebeat on your hosts, you could use something like [syslog](https://www.linux.com/topic/networking/remote-logging-syslog-part-1-basics/) to push your logs from each host to Filebeat or Logstash instead. Filebeat has a [syslog input](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-input-syslog.html), and [so does](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html) Logstash. So you could use either to process the logs.

Shaunak

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2020, 3:09pm UTC](https://discuss.elastic.co/t/is-there-way-to-pull-logs-from-remote-linux-server-instead-of-installing-filebeat-on-the-server-and-it-pushes-logs-to-logstash/228868/3 "2020-05-18T15:09:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.