# Logs of elastic stack components should go to their respective log file

**URL:** https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732
**Category:** Kibana
**Created:** [December 5, 2020, 1:21pm UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732 "2020-12-05T13:21:44Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![prat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prat/32/79978_2.png) [@prat](https://discuss.elastic.co/u/prat)
#### Post date: [December 5, 2020, 1:21pm UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/1 "2020-12-05T13:21:44Z")

</div>

Hi Team,

I am seeing logs of elastic stack components such as Kibana, Logstash, filebeat are going everywhere like in `/var/log/message` , `/var/log/daemon`, `journal.log` and flooding filesystem.  
how to make sure logs of elastic stack componenets only goes to their respective log file and rotate them frequently.

I know kibana by default throw output to stdout or in `/var/log/messages` file, how to make sure it write to its own log file and rotate also periodically.

Thanks,

---

<div class="post-metadata">

### Author: ![prat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prat/32/79978_2.png) [@prat](https://discuss.elastic.co/u/prat)
#### Post date: [December 7, 2020, 1:49pm UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/2 "2020-12-07T13:49:56Z")

</div>

Hi All,

Can someone please reply.

Thanks,

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [December 7, 2020, 3:43pm UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/3 "2020-12-07T15:43:05Z")

</div>

Hey @prat,

> [@prat](#):
>
> I know kibana by default throw output to stdout or in `/var/log/messages` file, how to make sure it write to its own log file and rotate also periodically.

Have you tried to configure `logging.dest` and `logging.rotate` explained here:  
[Configure Kibana | Kibana Guide [8.11] | Elastic](https://www.elastic.co/guide/en/kibana/current/settings.html#settings)?

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![prat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prat/32/79978_2.png) [@prat](https://discuss.elastic.co/u/prat)
#### Post date: [December 8, 2020, 5:08pm UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/4 "2020-12-08T17:08:17Z")

</div>

Hello @azasypkin

Thanks for your reply.

I will try above for kibana.

Can you please let me know the same for other components like elastocsearch, beats i.e logs to their respective log file and rotation.

Thanks,

---

<div class="post-metadata">

### Author: ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [December 9, 2020, 7:48am UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/5 "2020-12-09T07:48:19Z")

</div>

> [@prat](#):
>
> Can you please let me know the same for other components like elastocsearch, beats i.e logs to their respective log file and rotation.

It's easily discoverable if you just Google `Beats logging configuration` or `Elasticsearch logging configuration` or any other Elastic stack component:

- [Elasticsearch](https://www.elastic.co/guide/en/elasticsearch/reference/current/logging.html)
- [Beats](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html)

Best,  
Oleg

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2021, 7:48am UTC](https://discuss.elastic.co/t/logs-of-elastic-stack-components-should-go-to-their-respective-log-file/257732/6 "2021-01-06T07:48:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
