# Sent Logs from Cisco ASA to ELK (OS Ubuntu 18.04)

**URL:** <https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 28, 2019, 7:58pm UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181 "2019-05-28T19:58:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gustavo\_Oliveira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gustavo_oliveira/32/46103_2.png) [@Gustavo\_Oliveira](https://discuss.elastic.co/u/Gustavo_Oliveira)\
**Post date:** [May 28, 2019, 7:58pm UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181/1 "2019-05-28T19:58:03Z")

</div>

Good afternoon, I have a server ELK (OS Ubuntu 18.04), the network gateway (CISCO ASA) store all logs and send to Gray LOG, but i want that these logs been sents to ELK (filebeat\>logstash\>elasticsearch\>kibana).  
How can i do this?

---

<div class="post-metadata">

**Author:** ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)\
**Post date:** [May 29, 2019, 7:05am UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181/2 "2019-05-29T07:05:33Z")

</div>

You can use the [Syslog input](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-syslog.html) in Filebeat. Just point your Cisco ASA gateway to send the logs to Filebeat via syslog.

In the next 7.2.0 version, Filebeat will include a [module to parse Cisco ASA logs.](https://www.elastic.co/guide/en/beats/filebeat/master/filebeat-module-cisco.html)

---

<div class="post-metadata">

**Author:** ![Gustavo\_Oliveira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gustavo_oliveira/32/46103_2.png) [@Gustavo\_Oliveira](https://discuss.elastic.co/u/Gustavo_Oliveira)\
**Post date:** [May 29, 2019, 1:33pm UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181/3 "2019-05-29T13:33:54Z")

</div>

I created a archive at (/etc/logstash/conf.d/input-beat-1.conf) and tried to configure the archive, but i am not receive updates in my dashboard. ☹

Where exactly can i put it/ configure it?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 26, 2019, 1:33pm UTC](https://discuss.elastic.co/t/sent-logs-from-cisco-asa-to-elk-os-ubuntu-18-04/183181/4 "2019-06-26T13:33:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.