# Logstash and filebeat

**URL:** <https://discuss.elastic.co/t/logstash-and-filebeat/273614>\
**Category:** SIEM\
**Created:** [May 21, 2021, 5:28am UTC](https://discuss.elastic.co/t/logstash-and-filebeat/273614 "2021-05-21T05:28:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Francisco\_Ramirez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francisco_ramirez/32/89068_2.png) [@Francisco\_Ramirez](https://discuss.elastic.co/u/Francisco_Ramirez)\
**Post date:** [May 21, 2021, 5:28am UTC](https://discuss.elastic.co/t/logstash-and-filebeat/273614/1 "2021-05-21T05:28:37Z")

</div>

Hi Folks

I configured elasticsearch and kibana for visualizate event from wazuh, now i want see this event into the module siem.

best regards

---

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [May 21, 2021, 10:52pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat/273614/2 "2021-05-21T22:52:50Z")

</div>

Wazuh is completely unrelated to this forum. Wazuh events is created for their Wazuh Kibana App. If you want to use Elastic SIEM then you should ditch Wazuh, trying to use use both is counterintuitive.

If you want this, then you need to request this feature [New Issue · elastic/ecs (github.com)](https://github.com/elastic/ecs/issues/new/choose) , but high unlikely, due to Wazuh being almost a SIEM by itself.

The only thing I could think of is adding Wazuh agents and filebeat agents to each host, but that would be too much work for processing.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 18, 2021, 10:53pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat/273614/3 "2021-06-18T22:53:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
