# Graylog log store location
**URL:** https://community.graylog.org/t/graylog-log-store-location/4472
**Category:** Graylog Central (peer support)
**Created:** [March 7, 2018, 4:54am UTC](https://community.graylog.org/t/graylog-log-store-location/4472 "2018-03-07T04:54:11Z")
**Posts on this page:** 16
**Page:** 1
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 7, 2018, 4:54am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/1 "2018-03-07T04:54:11Z")
Hi
can any tell me where does graylog store logs of client on base of rsyslog in centos
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 7, 2018, 7:49am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/2 "2018-03-07T07:49:51Z")
All log messages ingested by Graylog are indexed (and thus stored) in Elasticsearch.
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 9, 2018, 8:54am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/3 "2018-03-09T08:54:17Z")
location
can it be this (/var/log/elasticsearch/)
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 9, 2018, 8:56am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/4 "2018-03-09T08:56:38Z")
if i am stopping elasticsearch service , can i be able to see the logs or not and how can i restore the logs
---
### Author:  [@macko003](https://community.graylog.org/u/macko003)
#### Post date: [March 9, 2018, 9:02am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/5 "2018-03-09T09:02:18Z")
Elasticsearch is a database, and in default it compress the logs, and may be store it in shards. so you can’t read the logs.
Here is the official Bacup and restore Doc.
[https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-snapshots.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-snapshots.html)
If you make a snapshot, you also won’t see the logs. It is not an export tool/solution.
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 9, 2018, 9:06am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/6 "2018-03-09T09:06:39Z")
You might want to take a look at the Graylog Enterprise Archiving plugin:
[http://docs.graylog.org/en/2.4/pages/archiving.html](http://docs.graylog.org/en/2.4/pages/archiving.html)
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 9, 2018, 11:53am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/7 "2018-03-09T11:53:58Z")
can any one explain me this ?
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 9, 2018, 11:55am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/8 "2018-03-09T11:55:37Z")
What exactly do you want to know?
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 9, 2018, 12:09pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/9 "2018-03-09T12:09:45Z")
indices , document , and size concepts
how many size will it take and all vaule which are their
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 9, 2018, 12:17pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/10 "2018-03-09T12:17:58Z")
Shards and Replicas are terms from Elasticsearch, see [https://www.elastic.co/guide/en/elasticsearch/reference/5.6/\_basic\_concepts.html#getting-started-shards-and-replicas](https://www.elastic.co/guide/en/elasticsearch/reference/5.6/_basic_concepts.html#getting-started-shards-and-replicas) for details.
The number of documents, indices, and the size on disk should be pretty self-explanatory.
Also make sure to read [http://docs.graylog.org/en/2.4/pages/configuration/index\_model.html](http://docs.graylog.org/en/2.4/pages/configuration/index_model.html) for details about how Graylog is using Elasticsearch and what the concept of index sets means.
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 9, 2018, 12:21pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/11 "2018-03-09T12:21:42Z")
can u tell approx 15 to 20 linux and windows server logs required how much size on graylog server
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 9, 2018, 1:31pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/12 "2018-03-09T13:31:53Z")
No, a generic answer for that is not possible.
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 12, 2018, 6:22am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/13 "2018-03-12T06:22:49Z")
Hi
how can i setup a dashboard with only 0 & 1 level and it should send a mail on basics 0 & 1 and alert on that base
---
### Author:  [@john007](https://community.graylog.org/u/john007)
#### Post date: [March 18, 2018, 3:58am UTC](https://community.graylog.org/t/graylog-log-store-location/4472/14 "2018-03-18T03:58:05Z")
Hi
Can anyone tell me how to setup graylog with logstash and elasticsearch i.e (elg) or share any docs related to it
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 18, 2018, 1:48pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/15 "2018-03-18T13:48:19Z")
Please don’t hijack old topics.
You can find step-by-step installation guides in the official Graylog documentation: [http://docs.graylog.org/en/2.4/](http://docs.graylog.org/en/2.4/)
---
### Author:  [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 18, 2018, 1:48pm UTC](https://community.graylog.org/t/graylog-log-store-location/4472/16 "2018-03-18T13:48:40Z")