# Winlogbeat vs Syslog-NG

**URL:** https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892
**Category:** Beats
**Created:** [June 19, 2017, 7:23am UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892 "2017-06-19T07:23:37Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)
#### Post date: [June 19, 2017, 7:23am UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892/1 "2017-06-19T07:23:37Z")

</div>

Hello.  
If I just install "Elasticsearch", "Kibana" and "Logstash" then can I use "Winlogbeat" on a Windows OS for forward evetlogs to my elastic box? In Elastic box I configured Syslog-NG.

Thank you.

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 19, 2017, 12:46pm UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892/2 "2017-06-19T12:46:00Z")

</div>

> [@hack3rcon](#):
>
> If I just install "Elasticsearch", "Kibana" and "Logstash" then can I use "Winlogbeat" on a Windows OS for forward evetlogs to my elastic box?

Winlogbeat can ship directly to Elasticsearch. And Kibana can then be used to visualize the data stored in Elasticsearch. Logstash isn't required if configure Winlogbeat to write directly to Elasticsearch. Logstash is only needed if you want to modify or enrich the data from Winlogbeat before writing it to Elasticsearch.

---

<div class="post-metadata">

### Author: ![hack3rcon](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)
#### Post date: [June 20, 2017, 6:42am UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892/3 "2017-06-20T06:42:19Z")

</div>

U used a guidance like "[https://www.digitalocean.com/community/tutorials/how-to-use-logstash-and-kibana-to-centralize-logs-on-centos-7](https://www.digitalocean.com/community/tutorials/how-to-use-logstash-and-kibana-to-centralize-logs-on-centos-7)" !!!

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 20, 2017, 2:13pm UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892/4 "2017-06-20T14:13:53Z")

</div>

You can following the [Winlogbeat Getting Started Guide](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-getting-started.html) to get started.

If your previous message was a question, then please clarify.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 10, 2017, 7:23am UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892/5 "2017-07-10T07:23:52Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
