# Need to config codec-cef as output

**URL:** <https://discuss.elastic.co/t/need-to-config-codec-cef-as-output/101596>\
**Category:** Logstash\
**Created:** [September 24, 2017, 10:04am UTC](https://discuss.elastic.co/t/need-to-config-codec-cef-as-output/101596 "2017-09-24T10:04:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GabayAvi](https://avatars.discourse-cdn.com/v4/letter/g/839c29/32.png) [@GabayAvi](https://discuss.elastic.co/u/GabayAvi)\
**Post date:** [September 24, 2017, 10:04am UTC](https://discuss.elastic.co/t/need-to-config-codec-cef-as-output/101596/1 "2017-09-24T10:04:48Z")

</div>

i need to take data from elk and put in arcsight syslog

elasticsearch \>\> logstash \>\> archsight syslog  
did any one have an example of logstash configuration for this kind of request?

thanks  
Avinoam

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 22, 2017, 10:04am UTC](https://discuss.elastic.co/t/need-to-config-codec-cef-as-output/101596/2 "2017-10-22T10:04:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.