# Where are Elastic Agent logs parsed

**URL:** <https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173>\
**Category:** Beats\
**Tags:** elastic-agent\
**Created:** [September 2, 2021, 1:47pm UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173 "2021-09-02T13:47:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sideyourspirit](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@sideyourspirit](https://discuss.elastic.co/u/sideyourspirit)\
**Post date:** [September 2, 2021, 1:47pm UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173/1 "2021-09-02T13:47:48Z")

</div>

Hello,  
I've got a question about elastic agent. Are the logs collected by the agent parsed on the host right away or is it done in elasticsearch ingest node?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [September 3, 2021, 4:38am UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173/2 "2021-09-03T04:38:53Z")

</div>

Hi @sideyourspirit Welcome to the community.

Unfortunately it depends on the integration, it is not completely consistent.

Some are parsed on the ingest node, some are parsed at the agent, I believe some are a combination.

Which integration(s) are you interested in?

---

<div class="post-metadata">

**Author:** ![sideyourspirit](https://avatars.discourse-cdn.com/v4/letter/s/59ef9b/32.png) [@sideyourspirit](https://discuss.elastic.co/u/sideyourspirit)\
**Post date:** [September 3, 2021, 9:01am UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173/3 "2021-09-03T09:01:21Z")

</div>

Hello @stephenb  
Thank you for your anwser. I don't have a speccific integration in mind right now, but is there a place in documentation I can find the information about the parsing location?  
It's always good to know where to search 🙂

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [September 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173/4 "2021-09-03T14:05:57Z")

</div>

No there is not ... You will need to look closely at the module...

I some sense pre-built integration are supposed to be setup and go.. use need not be concerned with internals , of course all the code / config is open for viewing and after you look at couple you will be able to understand how they work.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 1, 2021, 2:06pm UTC](https://discuss.elastic.co/t/where-are-elastic-agent-logs-parsed/283173/5 "2021-10-01T14:06:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
