# Use Logstash and Syslog-ng server **URL:** \ **Category:** Logstash\ **Created:** [February 3, 2016, 6:56pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901 "2016-02-03T18:56:54Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Miguel\_Bessa](https://avatars.discourse-cdn.com/v4/letter/m/ecccb3/32.png) [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Post date:** [February 3, 2016, 6:56pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/1 "2016-02-03T18:56:54Z")
Hi, I have in machine logstash and elasticsearch installed and I have in other server configured syslog-ng to collect logs. How I can use logstash to connect syslog-ng server to get logs and parse data locally to elasticsearch? I have to install something on the machine with logstash? And what I have to do in syslog-ng server? Thanks for help. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [February 3, 2016, 7:57pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/2 "2016-02-03T19:57:44Z")
Logstash can receive syslog messages via the udp, tcp, or syslog input plugins. You can use them to receive messages from servers running syslog-ng. Another option is to run Logstash or Filebeat on the syslog hosts and use Logstash/Filebeat to ship the logs to the central Logstash instance. ---
**Author:** ![fekete\_robert](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fekete_robert/32/23144_2.png) [@fekete\_robert](https://discuss.elastic.co/u/fekete_robert)\ **Post date:** [February 4, 2016, 8:32am UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/3 "2016-02-04T08:32:08Z")
Hi, Starting from version 3.7, [syslog-ng, you can send log messages directly to Elasticsearch](https://www.balabit.com/sites/default/files/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/configuring-destinations-elasticsearch.html), without having to involve Logstash. ---
**Author:** ![Miguel\_Bessa](https://avatars.discourse-cdn.com/v4/letter/m/ecccb3/32.png) [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Post date:** [February 4, 2016, 5:56pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/4 "2016-02-04T17:56:19Z")
But first, I need to use Logstash to parse message because it has irregular format. ---
**Author:** ![Miguel\_Bessa](https://avatars.discourse-cdn.com/v4/letter/m/ecccb3/32.png) [@Miguel\_Bessa](https://discuss.elastic.co/u/Miguel_Bessa)\ **Post date:** [February 4, 2016, 5:57pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/5 "2016-02-04T17:57:26Z")
So, I will have logstash in local machine and syslog-ng server. What I need to configure to ship data between machines? ---
**Author:** ![fekete\_robert](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fekete_robert/32/23144_2.png) [@fekete\_robert](https://discuss.elastic.co/u/fekete_robert)\ **Post date:** [February 4, 2016, 6:17pm UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/6 "2016-02-04T18:17:27Z")
syslog-ng can also parse messages ---
**Author:** ![vivekcts](https://avatars.discourse-cdn.com/v4/letter/v/dbc845/32.png) [@vivekcts](https://discuss.elastic.co/u/vivekcts)\ **Post date:** [November 17, 2016, 7:22am UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/7 "2016-11-17T07:22:05Z")
I have logtash on server1 and syslog-ng on server 2. I have configured syslogng conf to send logs to server1 on port 514. tcp but how do i check whether the logtash on server1 is receiving those logs. in my case it seems it is not receiving . i tried with blank input also . can you let em know hat exactly i am misisng here ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [November 17, 2016, 7:23am UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/8 "2016-11-17T07:23:40Z")
@vivekcts, please start a new thread for your unrelated question. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:30am UTC](https://discuss.elastic.co/t/use-logstash-and-syslog-ng-server/40901/9 "2017-07-06T04:30:27Z")