# Ingest apache error\_logs into graylog

**URL:** <https://community.graylog.org/t/ingest-apache-error-logs-into-graylog/7243>\
**Category:** Graylog Central (peer support)\
**Created:** [October 13, 2018, 1:24pm UTC](https://community.graylog.org/t/ingest-apache-error-logs-into-graylog/7243 "2018-10-13T13:24:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![geox](https://avatars.discourse-cdn.com/v4/letter/g/73ab20/32.png) [@geox](https://community.graylog.org/u/geox)\
**Post date:** [October 13, 2018, 1:24pm UTC](https://community.graylog.org/t/ingest-apache-error-logs-into-graylog/7243/1 "2018-10-13T13:24:44Z")

</div>

Hello,

I am new to Graylog and im trying to understand some points in order to configure properly Graylog with Filebeat as an input by sending Apache error\_logs.  
So here is my setup :

Server1 : Graylog ( elasticsearch/mongo/graylog) services

Client1 : Apache service + Filebeat

I’ve already read some articles like this one : [https://www.elastic.co/guide/en/beats/filebeat/6.3/filebeat-getting-started.html](https://www.elastic.co/guide/en/beats/filebeat/6.3/filebeat-getting-started.html) and several graylog threads ,but still is not clear to me how Im going to setup it correctly.

I know that Filebeat should send the input first to Logstash ,because doesnt support data over UDP ,so in Server1 should i setup additionaly Logstash ?  
Also , what is the recommended logstash or filebeat configuration in such caces ?

Any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [October 14, 2018, 11:08am UTC](https://community.graylog.org/t/ingest-apache-error-logs-into-graylog/7243/2 "2018-10-14T11:08:31Z")

</div>

no, you run filebeat on the client and create on the Graylog server a `beats` input. The filebeat configuration then need to be pointed to the beats input as output.

You might find this page helpfule.

[http://docs.graylog.org/en/2.4/pages/secure/sec\_graylog\_beats.html#secured-graylog-and-beats-input](http://docs.graylog.org/en/2.4/pages/secure/sec_graylog_beats.html#secured-graylog-and-beats-input)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [October 28, 2018, 11:08am UTC](https://community.graylog.org/t/ingest-apache-error-logs-into-graylog/7243/3 "2018-10-28T11:08:39Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.