# Shipping Postfix logs to ELK stack

**URL:** https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603
**Category:** Beats
**Tags:** filebeat
**Created:** [November 30, 2021, 9:42pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603 "2021-11-30T21:42:57Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![DoDuyen162000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/doduyen162000/32/95501_2.png) [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)
#### Post date: [November 30, 2021, 9:42pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603/1 "2021-11-30T21:42:57Z")

</div>

Hello,

Well this is not actually an issue rather query. I have been playing with ELK stack for a few days. I have a working ELK stack running on Ubuntu 20.4. Now, I want to ship mail logs (postfix logs) to my ELK stack. Is there any way to do that?

ELK server: Ubuntu 20.4  
Elasticsearch: 7.15  
Logstash: 7.15  
Kibana: 7.15

Best regards,  
Do Duyen

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 30, 2021, 9:48pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603/2 "2021-11-30T21:48:39Z")

</div>

Welcome to our community! 😃

Generally this is done with Filebeat and an ingest pipeline. Something like [GitHub - inqueue/postfix-ecs-pipeline: An Elasticsearch ingest node pipeline for Postfix](https://github.com/inqueue/postfix-ecs-pipeline) would do what you want.

---

<div class="post-metadata">

### Author: ![DoDuyen162000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/doduyen162000/32/95501_2.png) [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)
#### Post date: [November 30, 2021, 9:54pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603/3 "2021-11-30T21:54:36Z")

</div>

thanks you very much!!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 28, 2021, 9:55pm UTC](https://discuss.elastic.co/t/shipping-postfix-logs-to-elk-stack/290603/4 "2021-12-28T21:55:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
