# Where in kibana i can analyze logs coming from logstash , logs that are off line

**URL:** <https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705>\
**Category:** Kibana\
**Created:** [January 30, 2021, 7:24am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705 "2021-01-30T07:24:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![umen](https://avatars.discourse-cdn.com/v4/letter/u/ec9cab/32.png) [@umen](https://discuss.elastic.co/u/umen)\
**Post date:** [January 30, 2021, 7:24am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705/1 "2021-01-30T07:24:40Z")

</div>

Hello all  
i have elastic search which have 2 modes or 2 streams of logs  
first is the filebeat real-time logs which i can analyze in the kibana logs section.  
The second is online logs that are uploaded to s3 and they are picked up using logstash  
Each log create index and in kibana i do see them but only in the "Discover" section  
But how do i analyze them ? i can find them in the "logs" section as with the filebeat logs  
what I'm missing here ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 30, 2021, 8:58am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705/2 "2021-01-30T08:58:54Z")

</div>

It's not really clear what you are asking here sorry, can you elaborate more?

---

<div class="post-metadata">

**Author:** ![umen](https://avatars.discourse-cdn.com/v4/letter/u/ec9cab/32.png) [@umen](https://discuss.elastic.co/u/umen)\
**Post date:** [January 30, 2021, 9:11am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705/3 "2021-01-30T09:11:12Z")

</div>

i want to analyze the logstash off lines logs in the "logs" section of kibana using simple KQL and simple filters

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 27, 2021, 9:11am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705/4 "2021-02-27T09:11:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.