# Shipping Postfix Logs to Elasticsearch V7.3

**URL:** <https://discuss.elastic.co/t/shipping-postfix-logs-to-elasticsearch-v7-3/202602>\
**Category:** Logstash\
**Created:** [October 7, 2019, 11:23pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elasticsearch-v7-3/202602 "2019-10-07T23:23:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![a.gavric](https://avatars.discourse-cdn.com/v4/letter/a/73ab20/32.png) [@a.gavric](https://discuss.elastic.co/u/a.gavric)\
**Post date:** [October 7, 2019, 11:23pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elasticsearch-v7-3/202602/1 "2019-10-07T23:23:25Z")

</div>

Hello Everyone, we have been trying to find a solution to ship and parse postfix logs with Elastic stack 7.3, and have attempted several solutions in the last few days and have ran out of options.

Solutions attempted:

> **[ActionScripted/elastic-kibana-postfix](https://github.com/ActionScripted/elastic-kibana-postfix)**
>
> Kibana dashboards, visualizations and searches for Postfix - ActionScripted/elastic-kibana-postfix

  

> **[Monitoring Postfix logs with ELK](https://www.linkedin.com/pulse/monitoring-postfix-logs-elk-tin-le/)**
>
> I used to run hundreds of mailing lists, back in the days of Usenet, and managed Usenet-to-mail gateways, plus various other gateways. So it was important to keep an eye on my mail system and the monitoring systems I used then was extensive and...

  

> <https://stackoverflow.com/questions/41525357/parsing-postfix-logs-and-sending-to-elasticsearch>

  

> **[rhpenguin/Filebeat-module-for-Postfix](https://github.com/rhpenguin/Filebeat-module-for-Postfix)**
>
> Config example and Filebeat module for Postfix based on JPCERT/CC report. https://www.jpcert.or.jp/research/apt-loganalysis.html - rhpenguin/Filebeat-module-for-Postfix

And have at one point tried to combine these 4 possible solutions into something that works.  
The current setup is Beats \> Logstash \> Elasticsearch.  
I can see the logs are being shipped with Filebeat and the harvester as well as the inputs are being started, Additionally Logstash runs fine, and we can see indices being updated, However when triying to open the dashboards from the [https://github.com/ActionScripted/elastic-kibana-postfix](https://github.com/ActionScripted/elastic-kibana-postfix) solution, or simply try to find the logs by queriying the filebeat index with postfix\* we cannot see anything. Now my question is is there a viable soltuion for version 7.3 as all of these attempted are for a more earlier version of the Stack.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2019, 11:23pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elasticsearch-v7-3/202602/2 "2019-11-04T23:23:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.