Where to install Filebeat?


Sorry about this, but where would I install filebeat?

I have an ELK stack already created and want to track exchange messaging logs: would I install Filebeat on my ELK server or on the Exchange server?


On the exchange Server.

You can send the logs to the logstash instance or to the elasticsearch cluster.

Thanks David.

Second dumb question: How would I uninstall it?

Cheers Tony

it depends on the method you used to install it and the operating system of the server which host it.

Cheers David - It's on Windows 2012 R2 at C:\Program Files\Filebeat


you should have a script to uninstall the product in this folder. You shoul use it like the installation script as seen in the documentation.

cf. https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.