# Zeek with elasticsearch

**URL:** <https://discuss.elastic.co/t/zeek-with-elasticsearch/254231>\
**Category:** Elasticsearch\
**Created:** [November 4, 2020, 9:00am UTC](https://discuss.elastic.co/t/zeek-with-elasticsearch/254231 "2020-11-04T09:00:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![shabi037](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@shabi037](https://discuss.elastic.co/u/shabi037)\
**Post date:** [November 4, 2020, 9:00am UTC](https://discuss.elastic.co/t/zeek-with-elasticsearch/254231/1 "2020-11-04T09:00:38Z")

</div>

Hi all,

I am running Zeek (Bro) in an offline mode to analyze the pcap file. I get the logs in the "/opt/zeek/logs/current" directory. To further analyze the received logs I am passing those to Filebeat to be visualized further in Kibana. Here where the problem is. I am not getting those logs displayed in Kibana. Zeek module is working fine in the Filebeat. The log file path that appears is /var/log/elasticsearch/gc.log. Any help would be appreciated. Thanks in advance.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 9, 2020, 1:45am UTC](https://discuss.elastic.co/t/zeek-with-elasticsearch/254231/2 "2020-11-09T01:45:49Z")

</div>

Welcome to our community! 😃

It's best if you don't create multiple topics on the same question, it makes it harder for people to help you. I'll close this in favour of [Analyzing PCAP's with Zeek(Bro) in offline mode](https://discuss.elastic.co/t/analyzing-pcaps-with-zeek-bro-in-offline-mode/254515).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 9, 2020, 1:45am UTC](https://discuss.elastic.co/t/zeek-with-elasticsearch/254231/3 "2020-11-09T01:45:52Z")

</div>


