# Logstash & Filebeat sending file/logs over
**URL:** https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663
**Category:** Beats
**Tags:** filebeat
**Created:** [December 5, 2019, 9:38am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663 "2019-12-05T09:38:00Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)
#### Post date: [December 5, 2019, 9:38am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/1 "2019-12-05T09:38:00Z")
Hi all, I have this setup. Elasticsearch was setup on Server A with filebeat. Next I have Server B setup with logstash.
Is it correct that I send Nginx logs from Server B using "logstash" to server A? and Filebeat on server A will pickup and stores it in Elasticsearch.
Kindly point out which part I did wrongly. Thanks
---
### Author:  [@faec](https://discuss.elastic.co/u/faec)
#### Post date: [December 5, 2019, 9:41pm UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/2 "2019-12-05T21:41:54Z")
Hi! It sounds like you have it backwards: Filebeat can send to Logstash and / or Elasticsearch, but Logstash cannot send to Filebeat. If you install Filebeat on the same server as your nginx logs, you can forward them directly to Elasticsearch, or run them through Logstash first, but once they're in Logstash they don't need to go back to Filebeat.
---
### Author:  [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)
#### Post date: [December 6, 2019, 1:47am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/3 "2019-12-06T01:47:28Z")
Hi faec, thanks for your sharing. I would like to ask if I can use logstash directly to get input data from another server B?
But when I do so, the system prompt me for absolute path of the data. How can I achieve that ?
Secondly, my (server B) which is a CentOS server. When I installed the Logstash on it, I found the settings to be strange. The logstash.conf file has been located at /etc/init/logstash.conf. May I know should I move it back to /usr/share/logstash?
---
### Author:  [@faec](https://discuss.elastic.co/u/faec)
#### Post date: [December 6, 2019, 5:21pm UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/4 "2019-12-06T17:21:22Z")
Generally to get data off a server you will have to install something on it (logstash or a beat), or explicitly configure a service to forward the data in cases where it's supported (e.g. syslog).
The location of the logstash configuration may depend on how you installed it or other context... for more details try asking in [https://discuss.elastic.co/c/logstash](https://discuss.elastic.co/c/logstash) 🙂
---
### Author:  [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)
#### Post date: [December 9, 2019, 2:58am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/5 "2019-12-09T02:58:18Z")
Hi Faec,
I notice there is an error "[2019-12-09T10:52:46,692][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit" on the Logstash's log file. Is it due to the JAVA's runtime error? I'm currently using java version 1.8.0\_131.
`[2019-12-09T11:51:23,955][FATAL][logstash.runner] An unexpected error occurred! {:error=>#, :backtrace=>["org/jruby/ext/socket/RubyTCPServer.java:127:in `initialize'", "org/jruby/RubyIO.java:876:in `new'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/puma-2.16.0-java/lib/puma/binder.rb:234:in `add\_tcp\_listener'", "(eval):2:in `add_tcp_listener'", "/usr/share/logstash/logstash-core/lib/logstash/webserver.rb:88:in `start\_webserver'", "/usr/share/logstash/logstash-core/lib/logstash/webserver.rb:44:in `block in run'", "org/jruby/RubyRange.java:511:in `each'", "org/jruby/RubyEnumerable.java:1194:in `each_with_index'", "/usr/share/logstash/logstash-core/lib/logstash/webserver.rb:39:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:376:in `block in start_webserver'"]}`
Kindly share what can I do to help resolve this issue. Thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2020, 3:07am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663/6 "2020-01-06T03:07:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.