# Where to install Filebeat?

**URL:** <https://discuss.elastic.co/t/where-to-install-filebeat/89069>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 12, 2017, 3:05pm UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069 "2017-06-12T15:05:15Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![teejayuu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teejayuu/32/18356_2.png) [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Post date:** [June 12, 2017, 3:05pm UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/1 "2017-06-12T15:05:15Z")

</div>

Hi,

Sorry about this, but where would I install filebeat?

I have an ELK stack already created and want to track exchange messaging logs: would I install Filebeat on my ELK server or on the Exchange server?

Thanks  
Tony

---

<div class="post-metadata">

**Author:** ![David\_Leclere](https://avatars.discourse-cdn.com/v4/letter/d/cc9497/32.png) [@David\_Leclere](https://discuss.elastic.co/u/David_Leclere)\
**Post date:** [June 12, 2017, 3:12pm UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/2 "2017-06-12T15:12:07Z")

</div>

On the exchange Server.

You can send the logs to the logstash instance or to the elasticsearch cluster.

---

<div class="post-metadata">

**Author:** ![teejayuu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teejayuu/32/18356_2.png) [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Post date:** [June 13, 2017, 8:13am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/3 "2017-06-13T08:13:53Z")

</div>

Thanks David.

Second dumb question: How would I uninstall it?

Cheers Tony

---

<div class="post-metadata">

**Author:** ![David\_Leclere](https://avatars.discourse-cdn.com/v4/letter/d/cc9497/32.png) [@David\_Leclere](https://discuss.elastic.co/u/David_Leclere)\
**Post date:** [June 13, 2017, 9:03am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/4 "2017-06-13T09:03:27Z")

</div>

it depends on the method you used to install it and the operating system of the server which host it.

---

<div class="post-metadata">

**Author:** ![teejayuu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/teejayuu/32/18356_2.png) [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Post date:** [June 13, 2017, 9:44am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/5 "2017-06-13T09:44:36Z")

</div>

Cheers David - It's on Windows 2012 R2 at C:\Program Files\Filebeat

Thanks

---

<div class="post-metadata">

**Author:** ![David\_Leclere](https://avatars.discourse-cdn.com/v4/letter/d/cc9497/32.png) [@David\_Leclere](https://discuss.elastic.co/u/David_Leclere)\
**Post date:** [June 13, 2017, 11:31am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/6 "2017-06-13T11:31:02Z")

</div>

you should have a script to uninstall the product in this folder. You shoul use it like the installation script as seen in the documentation.

cf. [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 11, 2017, 11:31am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069/7 "2017-07-11T11:31:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.