# Where does Elasticsearch store logs? **URL:** \ **Category:** Elasticsearch\ **Created:** [September 20, 2019, 5:10pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466 "2019-09-20T17:10:40Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Rosho](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rosho/32/51872_2.png) [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Post date:** [September 20, 2019, 5:10pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/1 "2019-09-20T17:10:41Z")
Hi I am using a VM to explore the X-pack. I want to send some logs from the production servers (Elasticsearch and Splunk) to that VM. Where are the logs stored in Elasticsearch? Is there a path (ex: /var/log/)? I would like to use SFTP (as I want to send "some" logs. Not everything). I posted a question in august: [elastic X-pack vs Splunk MLTK](https://discuss.elastic.co/t/elastic-x-pack-vs-splunk-mltk/194284) Thank you ---
**Author:** ![jay224](https://avatars.discourse-cdn.com/v4/letter/j/dc4da7/32.png) [@jay224](https://discuss.elastic.co/u/jay224)\ **Post date:** [September 20, 2019, 5:45pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/2 "2019-09-20T17:45:20Z")
You can configure it to location you want by setting "path.logs:" value in elasticsearch.yml file. The location is $ES\_HOME/logs. ---
**Author:** ![Rosho](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rosho/32/51872_2.png) [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Post date:** [September 20, 2019, 7:55pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/3 "2019-09-20T19:55:33Z")
Hi @jay224 I used this: `curl "localhost:9200/_nodes/settings?pretty=true"` to find the home directory. From it I got this: ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/0/b07b4e514be1272ad1f72df3682d99a1a65f2c66.png) Do you mean this: "logs": "/var/log/elasticsearch" ? I have checked it. But it is not what I am looking for. Those are my own logs. I am using a VM to test Elasticsearch. So I have uploaded some logs from the production servers and some free .csv files available online. My question should have been: When using the "Data visualizer" to upload CSVs, JSON or "LOGS", what is the path were these are going to be stored? ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/1/017687bd3925ab70e4d9db6567f4abb3ada6e2f9.png) ---
**Author:** ![jay224](https://avatars.discourse-cdn.com/v4/letter/j/dc4da7/32.png) [@jay224](https://discuss.elastic.co/u/jay224)\ **Post date:** [September 20, 2019, 8:29pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/4 "2019-09-20T20:29:22Z")
Oh!! @Rosho That data gets indexed into elasticsearch, you can configure that location using "path.data:" in your case it is default /var/lib/elasticsearch. The data is indexed data and not your original files. ---
**Author:** ![Rosho](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rosho/32/51872_2.png) [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Post date:** [September 20, 2019, 9:09pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/5 "2019-09-20T21:09:25Z")
@jay224 So these are the logs, .csv and .json? ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e7061bf1b17b499c6fc46a2177bff7e1b9416ea4.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/1/41ba5deed8dd43822884b418b867c07c104c5dee.png) Okey, I have 2 questions: a) What does `"repo": ["/BST_data"]` mean? b) Is this the place were I have to put my data when I use SFTP? ---
**Author:** ![jay224](https://avatars.discourse-cdn.com/v4/letter/j/dc4da7/32.png) [@jay224](https://discuss.elastic.co/u/jay224)\ **Post date:** [September 23, 2019, 1:40pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/6 "2019-09-23T13:40:32Z")
path.repo is snapshot location, it used by elasticsearch to store snapshot information. No, you will not use this location for uploading data files. ---
**Author:** ![Rosho](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rosho/32/51872_2.png) [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Post date:** [September 23, 2019, 8:56pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/7 "2019-09-23T20:56:01Z")
@jay224 What is snapshot information? It seems like it is a copy of an index of the production servers. -----I have just started with Elasticsearch, so I do not know too much. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 21, 2019, 8:56pm UTC](https://discuss.elastic.co/t/where-does-elasticsearch-store-logs/200466/8 "2019-10-21T20:56:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.