# Transferring log files via Filebeat to Logstash and then Elasticsearch

**URL:** https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471
**Category:** Beats
**Tags:** filebeat
**Created:** [August 15, 2021, 5:38am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471 "2021-08-15T05:38:11Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Nisha2297](https://avatars.discourse-cdn.com/v4/letter/n/d2c977/32.png) [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)
#### Post date: [August 15, 2021, 5:38am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/1 "2021-08-15T05:38:11Z")

</div>

Hi,  
I am exploring on Elastic Stack and working on creating a pipeline to fetch logs via filbeat/metricbeat to logstash and then to Elasticsearch. I have updated the filebeat.yml/metricbeat.yml and logstash.conf file.

Could you please help me clarify if we need to start filebeat/metricbeat and then run logstash. Or first i need to start Elasticsearch and then filebeat/metricbeat.

If yes then please help me the commands to start filebeat!

Thanks,  
Nisha

---

<div class="post-metadata">

### Author: ![Nisha2297](https://avatars.discourse-cdn.com/v4/letter/n/d2c977/32.png) [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)
#### Post date: [August 16, 2021, 4:47am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/2 "2021-08-16T04:47:56Z")

</div>

@warkolm Can you plz help me here?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 16, 2021, 4:59am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/3 "2021-08-16T04:59:59Z")

</div>

Please have patience - you posted this thread on the weekend when people are likely to not be working, and don't ping people that aren't already part of your thread.

---

<div class="post-metadata">

### Author: ![Nisha2297](https://avatars.discourse-cdn.com/v4/letter/n/d2c977/32.png) [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)
#### Post date: [August 16, 2021, 5:01am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/4 "2021-08-16T05:01:52Z")

</div>

Okay sure!

---

<div class="post-metadata">

### Author: ![chandu5565](https://avatars.discourse-cdn.com/v4/letter/c/c57346/32.png) [@chandu5565](https://discuss.elastic.co/u/chandu5565)
#### Post date: [August 16, 2021, 5:01am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/5 "2021-08-16T05:01:53Z")

</div>

To ingest the data to elasticsearch it need to be up and running so Start elasticsearch first then you can start filebeat/metricbeat  
if elasticsearch output configured in .yml files of filebeat/metricbeat.  
If logstash is confiugured as output start logstash then beats.

1. elasticsearch
2. logstash
3. filebeat/metricbeat

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 13, 2021, 7:02am UTC](https://discuss.elastic.co/t/transferring-log-files-via-filebeat-to-logstash-and-then-elasticsearch/281471/6 "2021-09-13T07:02:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
