# S3 bucket logs forwarding to Elastic Search through filebeat

**URL:** <https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 29, 2019, 7:08pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403 "2019-08-29T19:08:28Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sk545](https://avatars.discourse-cdn.com/v4/letter/s/7993a0/32.png) [@sk545](https://discuss.elastic.co/u/sk545)\
**Post date:** [August 29, 2019, 7:08pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/1 "2019-08-29T19:08:28Z")

</div>

I have my application logs present in AWS S3 bucket ,  
Now i am wondering is there any way to forward those logs to elastic search through file beat ?

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [August 30, 2019, 8:37am UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/2 "2019-08-30T08:37:02Z")

</div>

The upcoming 7.4 release of filebeat will have an s3 input, see [https://www.elastic.co/guide/en/beats/filebeat/7.4/filebeat-input-s3.html](https://www.elastic.co/guide/en/beats/filebeat/7.4/filebeat-input-s3.html)

---

<div class="post-metadata">

**Author:** ![sk545](https://avatars.discourse-cdn.com/v4/letter/s/7993a0/32.png) [@sk545](https://discuss.elastic.co/u/sk545)\
**Post date:** [August 30, 2019, 2:47pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/3 "2019-08-30T14:47:30Z")

</div>

thanks @spinscale, i believe log stash already has S3 input config(not sure) ?

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [August 30, 2019, 6:53pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/4 "2019-08-30T18:53:27Z")

</div>

yes, indeed. see [https://www.elastic.co/guide/en/logstash/7.3/plugins-inputs-s3.html](https://www.elastic.co/guide/en/logstash/7.3/plugins-inputs-s3.html)

---

<div class="post-metadata">

**Author:** ![sk545](https://avatars.discourse-cdn.com/v4/letter/s/7993a0/32.png) [@sk545](https://discuss.elastic.co/u/sk545)\
**Post date:** [August 30, 2019, 7:17pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/5 "2019-08-30T19:17:02Z")

</div>

thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2019, 7:17pm UTC](https://discuss.elastic.co/t/s3-bucket-logs-forwarding-to-elastic-search-through-filebeat/197403/6 "2019-09-27T19:17:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.