# Where are the logs of beats- Filebeat, Metricbeat & packetbeat located in an elk server? **URL:** \ **Category:** Beats\ **Created:** [April 27, 2017, 11:43am UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851 "2017-04-27T11:43:18Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![JayArthur](https://avatars.discourse-cdn.com/v4/letter/j/7feea3/32.png) [@JayArthur](https://discuss.elastic.co/u/JayArthur)\ **Post date:** [April 27, 2017, 11:43am UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/1 "2017-04-27T11:43:19Z")
10:46am Hey Elastic... I got a little problem I'd like you to help me fix.. I have an ELK server hosted on Centos 7 and I'm pulling logs from 2 Debian machines. From the server, where would I retrieve logs for filebeat, metricbeat, topbeat and packetbeat from the 2 client machines ? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [April 27, 2017, 12:09pm UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/2 "2017-04-27T12:09:21Z")
I'm confused by your question. What do you want to do? In brief, beats are agents that you can put on edge machines to collect various things like: - logs with filebeat (you know where are the logs you want to collect I guess) - network content (wireshark on the network card) with packetbeat (you know the network car you want to use I guess) - system and application metrics with metricbeat (you know which applications are running on your server I guess) topbeat has been replaced by metricbeat ---
**Author:** ![JayArthur](https://avatars.discourse-cdn.com/v4/letter/j/7feea3/32.png) [@JayArthur](https://discuss.elastic.co/u/JayArthur)\ **Post date:** [April 27, 2017, 12:42pm UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/3 "2017-04-27T12:42:33Z")
Hey dadonet, I would like to know the location of the log files for the beat agents. for instance the location of filebeat , metricbeat and packetbeat log files. Thank you.. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [April 27, 2017, 1:00pm UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/4 "2017-04-27T13:00:20Z")
I don't know. I moved the topic to #beats ---
**Author:** ![Xavy](https://avatars.discourse-cdn.com/v4/letter/x/e0b2c6/32.png) [@Xavy](https://discuss.elastic.co/u/Xavy)\ **Post date:** [April 27, 2017, 1:52pm UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/5 "2017-04-27T13:52:42Z")
> [@JayArthur](#): > > From the server, where would I retrieve logs for filebeat, metricbeat, topbeat and packetbeat from the 2 client machines ? From the SERVER there are not BEAT logs - unless you installed the agent on the server(in this case the server would behalf at the same time as a server and as a client). You will only be able to find BEAT logs on the clients where you have installed them. Additionally, server-side you might find some entries regarding beats connections on the service you're sending BEATS logs to (ES or logstash) On the CLIENTS - case you installed using rpm package - logs should be on /var/log/[packet|metric|file]beat/\* ---
**Author:** ![JayArthur](https://avatars.discourse-cdn.com/v4/letter/j/7feea3/32.png) [@JayArthur](https://discuss.elastic.co/u/JayArthur)\ **Post date:** [April 28, 2017, 4:57am UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/6 "2017-04-28T04:57:58Z")
Thank you Xavy ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 26, 2017, 4:59am UTC](https://discuss.elastic.co/t/where-are-the-logs-of-beats-filebeat-metricbeat-packetbeat-located-in-an-elk-server/83851/7 "2017-05-26T04:59:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.