# Logstash is essential or not

**URL:** <https://discuss.elastic.co/t/logstash-is-essential-or-not/218204>\
**Category:** Logstash\
**Created:** [February 6, 2020, 2:54pm UTC](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204 "2020-02-06T14:54:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![opensourcengineer](https://avatars.discourse-cdn.com/v4/letter/o/ecccb3/32.png) [@opensourcengineer](https://discuss.elastic.co/u/opensourcengineer)\
**Post date:** [February 6, 2020, 2:54pm UTC](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204/1 "2020-02-06T14:54:02Z")

</div>

hi team,

i have installed filebeat on my syslog server and in kibana i configured the output to elasticsearch so in this case i am getting the syslog server logs directly to kibana dashboard using the filebeat module system. so do i still need to use logstash for the filtering of the logs ?

why do we need logstash nodes in this kind of scenario, please xplain

---

<div class="post-metadata">

**Author:** ![kares](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kares/32/70705_2.png) [@kares](https://discuss.elastic.co/u/kares)\
**Post date:** [February 11, 2020, 3:17pm UTC](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204/2 "2020-02-11T15:17:58Z")

</div>

Hello Opensourceengineer, sounds like you do not need LS nodes for your scenario.

If you're able to handle all your needs using filebeat (or potentially ingestion at ES' end) and are satisfied with how the documents look in ES than simply do not use LS.

LS is there if you had other inputs (than just a simple syslog/files) or needed 'heavier' processing of log data e.g. application specific logs that require custom parsing or normalization rules.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 10, 2020, 3:18pm UTC](https://discuss.elastic.co/t/logstash-is-essential-or-not/218204/3 "2020-03-10T15:18:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.