# Logstash Forwarder not supported on AIX - what now?! **URL:** \ **Category:** Logstash\ **Created:** [October 29, 2015, 8:59pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305 "2015-10-29T20:59:12Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![jjdepaul](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Post date:** [October 29, 2015, 8:59pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/1 "2015-10-29T20:59:12Z")
I just found out that Logstash Forwarder is not supported on the AIX platform - currently that's our application platform from which we need to source our logs and send them to the ELK stack on a Linux box. Our application writes SystemOut.log files to the local file system. Are there any other possible solution in lieu of the Logstash Forwarder that we could consider?! ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [October 30, 2015, 6:09am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/2 "2015-10-30T06:09:12Z")
We don't support any AIX sorry. Can you ship it via rsyslog or similar? ---
**Author:** ![jjdepaul](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Post date:** [October 30, 2015, 12:44pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/3 "2015-10-30T12:44:04Z")
Not familiar with rsyslog yet. Does rsyslog allow forwarding log data like LS Forwarder would? Will it handle our application SystemOut.log files - they are not in a SysLog format... ---
**Author:** ![jjdepaul](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Post date:** [January 25, 2016, 2:47pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/4 "2016-01-25T14:47:55Z")
We have been working with rsyslog trying to get it to send data to our remote Logstash service. Our architecture is this: Application server running on AIX machine, the ELK stack running on RHEL server running remotely. We can get some logs to the ELK server, but our application produces log files with dynamic names (including order number), so we need to setup a log file monitoring in rsyslog with wildcard in the file name. This introduces additional requirements for rsyslog: specific version of rsyslog that has to be compiled from the source code and the enablement of the inotify feature at the kernel level - we are not sure we can have that turned on. Just in case we run into a roadblock here - is there another option out there for sending logs to ELK?! Is Beats supported on AIX?! ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 25, 2016, 10:50pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/5 "2016-01-25T22:50:47Z")
There's no go support on AIX, so there are no beats. ---
**Author:** ![smistry](https://avatars.discourse-cdn.com/v4/letter/s/b5e925/32.png) [@smistry](https://discuss.elastic.co/u/smistry)\ **Post date:** [February 11, 2016, 10:13am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/6 "2016-02-11T10:13:00Z")
Hi James, Did you have any progress on this? Did you manage to solve your issue with getting the AIX logs into Elastic? I have been tasked to do the same. The issue on my part is the the log I need to tail has a very high volume so it will impact other infrastructure. So, I need to run filter before getting it on the the network. Regards Sanjay Mstry ---
**Author:** ![jjdepaul](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Post date:** [February 11, 2016, 1:29pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/7 "2016-02-11T13:29:57Z")
We tried the rsyslog and it would have worked, except our log names are dynamic: tracelog\_order2324.txt, etc and it required firmware upgrade to get to the next level of the rsyslog, making it unfeasible, so we looked elsewhere. We found rsynch utility which works for us just fine. > **[The rsync family](https://www.ibm.com/developerworks/aix/library/au-rsyncfamily/)** > > Synchronizing two machines (such as a laptop and a desktop computer) is easier and faster when you use rsync, which boasts an efficient algorithm and options for just about everything you might need. And if a command-line operation isn't your thing,... Good luck - James ---
**Author:** ![Hari1](https://avatars.discourse-cdn.com/v4/letter/h/ee59a6/32.png) [@Hari1](https://discuss.elastic.co/u/Hari1)\ **Post date:** [August 25, 2016, 6:25pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/8 "2016-08-25T18:25:11Z")
I have a websphere application server running in a AIX machine, and all the log file are configured to fall under (usual) path /Appserver/logs/SystemOut.log.... Now I have installed ELK in one of my windows machine. Can I have some basic overview of how to integrate logstash with my Websphere running in AIX? or Is it even possible to accomplish that? ---
**Author:** ![jjdepaul](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Post date:** [August 25, 2016, 7:40pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/9 "2016-08-25T19:40:15Z")
We are using a utility program called rsynch to ship data from AIX machine where our application runs over to a remote ELK server. It works ok so far. We configured rsynch to watch a certain source directory and synch them out to the remote server. The remote server runs Logstash instances that consume the data and record it in the ElasticSearch cluster. ---
**Author:** ![caoping](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@caoping](https://discuss.elastic.co/u/caoping)\ **Post date:** [October 26, 2016, 9:20am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/10 "2016-10-26T09:20:20Z")
Hi James, So glad to see your posts. I'm also working on shipping application log data to remote server for ELK analysis and search. You said you were using **rsync** to sync up log data between AIX machine and the remote ELK server. I read the post you recommended, but still not familiar with it. I have a question about this tool. Does it support file rotation? Does it ship data like what filebeat does? Thanks for your help. ---
**Author:** ![melvin\_chua](https://avatars.discourse-cdn.com/v4/letter/m/e47774/32.png) [@melvin\_chua](https://discuss.elastic.co/u/melvin_chua)\ **Post date:** [October 26, 2016, 3:26pm UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/11 "2016-10-26T15:26:41Z")
Hello Caoping, Thanks for your interest! I work with James on the infra part of the ELK setup. =) Rsync makes delta transfer of recently-changed log files from our source AIX server. We scheduled it to throw the delta every minute. In terms of FIle Rotation? Well there's no function to weed out old log files yet, at least we did not use any rsync args to do some rotation. In theory, rsync works best as a filesystem synchronization tool via ssh, so we maximize it to sync our log file directory with the remote directory (where Logstash can listen). Not as lightweight as FIlebeat I believe, but works for now. Still looking for an AIX-friendly solution =) . ---
**Author:** ![caoping](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@caoping](https://discuss.elastic.co/u/caoping)\ **Post date:** [October 27, 2016, 3:12am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/12 "2016-10-27T03:12:37Z")
Hi Raymund, Thanks for your quick response. I'm quite new to AIX, and got stuck in the first step - installing rsync in AIX. I've installed the AIX toolbox, but don't know how to install rsync from it. By searching from google, it told me to use **rpm** to install that. However, I don't know what's the package name of rsync. Also I didn't find any package with text **rsync**. I know it's a stupid problem, but I really need your help on the installation. Thanks so much. ---
**Author:** ![caoping](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@caoping](https://discuss.elastic.co/u/caoping)\ **Post date:** [October 27, 2016, 8:50am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/13 "2016-10-27T08:50:06Z")
Hi Raymund, Please ignore my previous question about how to install rsync in AIX platform since I've done it. But I still have a question about how you're using rsync. The requirement is I need to sync files on server A with server B. So at B, I need to run rsync as a daemon, which will listen to a particular port to see if any incoming rsync requests from a remote server, right? Then how about server A? How to let rsync at A to automatically ship log data to server B at a interval? I'm still new to rsync, but I'll dig it deeper. Thanks for your help! Very appreciated. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:32am UTC](https://discuss.elastic.co/t/logstash-forwarder-not-supported-on-aix-what-now/33305/14 "2017-07-06T04:32:25Z")