# Snapshot failure logs to beats--\>logstash
**URL:** https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373
**Category:** Elasticsearch
**Created:** [April 24, 2018, 8:20pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373 "2018-04-24T20:20:40Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@mww1](https://discuss.elastic.co/u/mww1)
#### Post date: [April 24, 2018, 8:20pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373/1 "2018-04-24T20:20:40Z")
Hi guys,
I want to make a model where I can get the alert/logs of the snapshots attempt to take backups fail.
I want it to send the logs to beats.
is there any watch job I could make?
please guide me.
Thanks. 🙂
---
### Author:  [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [April 24, 2018, 8:43pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373/2 "2018-04-24T20:43:01Z")
If you snapshot with Elasticsearch Curator, you can log in JSON format, which is ready for consumption by filebeat/Logstash, complete with ISO8601 timestamp. You'd be able to tell whether your snapshot completed from the logs.
---
### Author:  [@mww1](https://discuss.elastic.co/u/mww1)
#### Post date: [April 24, 2018, 8:47pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373/3 "2018-04-24T20:47:15Z")
thanks for the reply.
yes we are using curator to take the snapshot.
can you please elaborate more on the approach of getting the logs and parsing it to determine whether it failed or not and then sending it to beats to consume it? is there a watch job for the same?
---
### Author:  [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)
#### Post date: [April 27, 2018, 12:29pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373/4 "2018-04-27T12:29:53Z")
No, there's no watch job. The Curator documentation [shows how to log in json format](https://www.elastic.co/guide/en/elasticsearch/client/curator/5.5/configfile.html#logformat). The rest would be the subject of a different thread in the beats or logstash forums.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 25, 2018, 12:29pm UTC](https://discuss.elastic.co/t/snapshot-failure-logs-to-beats-logstash/129373/5 "2018-05-25T12:29:55Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.