# Native logs in ElK stack

**URL:** <https://discuss.elastic.co/t/native-logs-in-elk-stack/47247>\
**Category:** Elasticsearch\
**Created:** [April 13, 2016, 12:42pm UTC](https://discuss.elastic.co/t/native-logs-in-elk-stack/47247 "2016-04-13T12:42:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sayantan\_Mondal](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@Sayantan\_Mondal](https://discuss.elastic.co/u/Sayantan_Mondal)\
**Post date:** [April 13, 2016, 12:42pm UTC](https://discuss.elastic.co/t/native-logs-in-elk-stack/47247/1 "2016-04-13T12:42:26Z")

</div>

Hi ,

We are trying to investigate if we can retain logs in native format(e.g Oracle DB logs) so that we can use them in dealing with audit trails or sending logs to product vendor from Central Log management server.

Thanks,

Sayantan

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 14, 2016, 12:51am UTC](https://discuss.elastic.co/t/native-logs-in-elk-stack/47247/2 "2016-04-14T00:51:56Z")

</div>

Yes you can.  
Logstash stores the original event in the message field for example, and then ES stores that in `_source`.

---

<div class="post-metadata">

**Author:** ![Sayantan\_Mondal](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@Sayantan\_Mondal](https://discuss.elastic.co/u/Sayantan_Mondal)\
**Post date:** [April 14, 2016, 11:44am UTC](https://discuss.elastic.co/t/native-logs-in-elk-stack/47247/3 "2016-04-14T11:44:04Z")

</div>

Hi,

```
   Thanks for the update. One question can we create the raw file repository as a part of ELK stack with a connectivity to Hadoop or a Central file server ?.

```

If we use Hadoop with Elasticsearch how does Logstash fit in the architecture.

Thanks,

Sayantan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:59pm UTC](https://discuss.elastic.co/t/native-logs-in-elk-stack/47247/4 "2017-07-05T22:59:19Z")

</div>


