# Linux and Windows events ingestion **URL:** \ **Category:** Elastic Security\ **Created:** [September 23, 2024, 8:13am UTC](https://discuss.elastic.co/t/linux-and-windows-events-ingestion/366940 "2024-09-23T08:13:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Cristina\_Marletta\_Li](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cristina_marletta_li/32/137793_2.png) [@Cristina\_Marletta\_Li](https://discuss.elastic.co/u/Cristina_Marletta_Li)\ **Post date:** [September 23, 2024, 8:13am UTC](https://discuss.elastic.co/t/linux-and-windows-events-ingestion/366940/1 "2024-09-23T08:13:49Z")
Hi, all. What is the best way to ingest linux and windows system events into Elasticsearch? We would like to use elasticsearch as siem. thanks. ---
**Author:** ![jamie.hynds](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamie.hynds/32/84205_2.png) [@jamie.hynds](https://discuss.elastic.co/u/jamie.hynds)\ **Post date:** [September 23, 2024, 2:33pm UTC](https://discuss.elastic.co/t/linux-and-windows-events-ingestion/366940/2 "2024-09-23T14:33:03Z")
Hi @Cristina_Marletta_Li , I'd recommend using [Elastic Agent](https://www.elastic.co/elastic-agent), couple with some out of the box integrations. The '[System](https://www.elastic.co/docs/current/integrations/system)' integration is installed by default on both Windows and Linux, and will ingest Windows System/Application/Security events on Windows and auth/syslog messages on Linux. You can then apply additional integrations on your hosts from there. (e.g. Sysmon, Powershell, Auditd, etc) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 21, 2024, 2:33pm UTC](https://discuss.elastic.co/t/linux-and-windows-events-ingestion/366940/3 "2024-10-21T14:33:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.