# Time interval for sending logs using Winlogbeat

**URL:** <https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [February 21, 2018, 11:24am UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822 "2018-02-21T11:24:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hari\_Baskar](https://avatars.discourse-cdn.com/v4/letter/h/b487fb/32.png) [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\
**Post date:** [February 21, 2018, 11:24am UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822/1 "2018-02-21T11:24:19Z")

</div>

Hi,

I'm using the Winlogbeat for log shipping into elasticsearch. But I don't want to send the logs continuously into elasticsearch. I need to send only every half hour once. So, Please suggest me How to do that.

Thanks in Advance.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 23, 2018, 10:45pm UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822/2 "2018-02-23T22:45:11Z")

</div>

That's not really how Beats were designed to work. They are designed to ship logs off of the endpoint as soon as possible. When new events are available it reads them and ships them. I'm curious why you only want to send them every 30 minutes?

---

<div class="post-metadata">

**Author:** ![Hari\_Baskar](https://avatars.discourse-cdn.com/v4/letter/h/b487fb/32.png) [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\
**Post date:** [February 28, 2018, 5:54am UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822/3 "2018-02-28T05:54:44Z")

</div>

Because I will plan to connected 1k more pcs to single elk server. In Such case, For reducing the data load, I asked.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 28, 2018, 5:54am UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822/4 "2018-03-28T05:54:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.