# Need to install Filebeat on Single instance for multiple servers

**URL:** <https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 11, 2024, 3:53am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117 "2024-03-11T03:53:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nitin08bisht](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Post date:** [March 11, 2024, 3:53am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117/1 "2024-03-11T03:53:23Z")

</div>

Hi All,

We have multiple servers and I want to install the Filebeat on single instance for all servers.

Can anyone suggest the way to achieve this.

Thanks,  
Nitin Bisht

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [March 13, 2024, 8:05am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117/2 "2024-03-13T08:05:26Z")

</div>

Hi @Nitin08bisht,

1. Does it mean, You want to install filebeat on one server and it should able to read logs file from rest of other servers?

2. Also curious to know what is your use case?

---

<div class="post-metadata">

**Author:** ![Nitin08bisht](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Post date:** [March 19, 2024, 4:21pm UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117/3 "2024-03-19T16:21:15Z")

</div>

Hi @ashishtiwari1993 ,

Yes, I want to install Filebeat on a single server.  
Please find the our use case below.

Our Use case:  
for eg. A shared location `\\sharedPath\Logs` having subdirectory A, B, C so on. Each directory contain log file of different -2 application.

> \sharedPath\Logs\A  
> \sharedPath\Logs\B  
> \sharedPath\Logs\C

We want to setup ILM policy based on the directory so that logs of each directory will be ingest on index based on the defined ILM Policy as mentioned below.

```auto
setup.ilm:
      enabled: true
      policy_name: "A"
      overwrite: true
      rollover_alias: "A-%{[agent.version]}"
      pattern: "{now/d}-0000001"

setup.ilm:
      enabled: true
      policy_name: "B"
      overwrite: true
      rollover_alias: "B-%{[agent.version]}"
      pattern: "{now/d}-0000001"

setup.ilm:
      enabled: true
      policy_name: "C"
      overwrite: true
      rollover_alias: "C-%{[agent.version]}"
      pattern: "{now/d}-0000001"

```

Thanks,  
Nitin Bisht

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [March 22, 2024, 8:10am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117/4 "2024-03-22T08:10:01Z")

</div>

1. Not sure if you have tried [Fleet + Elastic agent](https://www.elastic.co/guide/en/fleet/current/fleet-overview.html). You can use elastic agent instead of filebeat. You need to install elastic agent at every server and from the fleet (In kibana) you can manage different policy across the servers.

2. If you don't want to use fleet, You can manually install filebeat on every server or you can use automation tool like Ansible for auto deployment and upgradation. But still, changing configuration will be manual where as fleet provides central place to manage configuration across the servers.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 19, 2024, 10:10am UTC](https://discuss.elastic.co/t/need-to-install-filebeat-on-single-instance-for-multiple-servers/355117/5 "2024-04-19T10:10:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.