From what you are saying logs are not stored on LS.
They are stored on ES so can you tell me where can I find this on ES as my LS,ES and Kabina are on same machine ie ELK.
What our requirement is in filebeat.yml
So from this I just want the XYZ log from all Filebeat on all client machine so that I can tar hem.
regarding abc log I want it to work as it is it goes to LS then to ES and then Kibana.
I want the logs(XYZ) from all machine to gather on either LS or ES so that I can combine them in a folder and tar and mail them. This is our requirement.
Can you please provide me where can I find this logs.