# Kibana logs vs filebeat kibana module

**URL:** <https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring, beats-module, filebeat\
**Created:** [July 25, 2021, 3:08am UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546 "2021-07-25T03:08:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [July 25, 2021, 3:08am UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546/1 "2021-07-25T03:08:08Z")

</div>

I'm investigating the filebeat kibana module to ingest Kibana logs, but the kibana doc (7.13.4) seems lacking in how to configure the json format logs. The module seems to want to look in /var/log/kibana/\*\_audit.json and /var/log/kibana/kibana.stdout but the default kibana install dosen't seem to log to these destinations and the kibana doc has no example that seems to apply.

Thanks.

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 26, 2021, 11:25am UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546/2 "2021-07-26T11:25:11Z")

</div>

Hi!

You configure the paths as it is documented in [Kibana module | Filebeat Reference [7.13] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-kibana.html#_log_fileset_settings_6).

C.

---

<div class="post-metadata">

**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Post date:** [July 26, 2021, 12:07pm UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546/3 "2021-07-26T12:07:13Z")

</div>

I can't find how to get kibana to produce the files at all (\_audit.json) and get those files to rotate daily.

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [July 27, 2021, 9:02am UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546/4 "2021-07-27T09:02:07Z")

</div>

But this is a Kibana specific question, no? Could you redirect your question about how to configure Kibana's logging to Kibana's forum?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 24, 2021, 9:02am UTC](https://discuss.elastic.co/t/kibana-logs-vs-filebeat-kibana-module/279546/5 "2021-08-24T09:02:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.