# Sending Windows Event Viewer logs w/o using Winlogbeat **URL:** \ **Category:** Logstash\ **Created:** [March 21, 2018, 4:50pm UTC](https://discuss.elastic.co/t/sending-windows-event-viewer-logs-w-o-using-winlogbeat/125037 "2018-03-21T16:50:01Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Feedy](https://avatars.discourse-cdn.com/v4/letter/f/76d3ee/32.png) [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Post date:** [March 21, 2018, 4:50pm UTC](https://discuss.elastic.co/t/sending-windows-event-viewer-logs-w-o-using-winlogbeat/125037/1 "2018-03-21T16:50:01Z")
Is it possible to ship window event viewer logs from syslog-ng server to ELK? Normally I would install winlogbeat on windows server and ship directly to logstash but for this scenario, I won't be able to install an agent on the windows server. So if there already is an agent in place on the windows server that will send to a syslog-ng server, how would I go about shipping those logs from the syslog server to logstash? ---
**Author:** ![Caleb\_Chaney](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/caleb_chaney/32/54110_2.png) [@Caleb\_Chaney](https://discuss.elastic.co/u/Caleb_Chaney)\ **Post date:** [March 23, 2018, 2:24pm UTC](https://discuss.elastic.co/t/sending-windows-event-viewer-logs-w-o-using-winlogbeat/125037/2 "2018-03-23T14:24:58Z")
Logstash has a [sysylog input](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html). I'm not overly familiar with syslog-ng, but I imagine you can configure syslog-ng send syslog style messages to Logstash. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 20, 2018, 2:25pm UTC](https://discuss.elastic.co/t/sending-windows-event-viewer-logs-w-o-using-winlogbeat/125037/3 "2018-04-20T14:25:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.