# How Search Guard works with Beat (without Logstash) ? **URL:** \ **Category:** Search Guard\ **Created:** [January 18, 2019, 4:37pm UTC](https://forum.search-guard.com/t/how-search-guard-works-with-beat-without-logstash/1293 "2019-01-18T16:37:39Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Voortexx](https://avatars.discourse-cdn.com/v4/letter/v/ebca7d/32.png) [@Voortexx](https://forum.search-guard.com/u/Voortexx)\ **Post date:** [January 18, 2019, 4:37pm UTC](https://forum.search-guard.com/t/how-search-guard-works-with-beat-without-logstash/1293/1 "2019-01-18T16:37:39Z")
Elasticsearch and Search Guard version : 6.3.2 Entreprise Module : Disabled JVM Version : 1.8.0\_111 Operating System : Debian 9 I have a question because i didn’t find any documentation about Beat in Search Guard main page. Actually we are using Kibana and Elasticsearch without Logstash. We don’t need it because we only use Winlogbeat for the moment. So, does we have to use Logstash to make Search Guard works with Beat or it can funtionnate without it ? If yes is there any documentation to make Elasticsearch, Kibana, Searchguard and Beat work without Logstash ? Thanks for help ! ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [January 19, 2019, 2:12pm UTC](https://forum.search-guard.com/t/how-search-guard-works-with-beat-without-logstash/1293/2 "2019-01-19T14:12:41Z")
Search Guard works perfectly with beats although we no dedicated docs for it. You don't need logstash for it. Beats are just client which communicate over HTTP/S and the most important config properties are: output.elasticsearch:   username: filebeat   password: verysecret   protocol: https   hosts: ["localhost:9200"]   ssl.certificate\_authorities:     - /etc/pki/my\_root\_ca.pem If you like to use client certificate based authentication then it looks like output.elasticsearch:   protocol: https   hosts: ["elasticsearch.example.com:9200"]   ssl.certificate\_authorities:     - /etc/pki/my\_root\_ca.pem   ssl.certificate: "/etc/pki/client.pem"   ssl.key: "/etc/pki/key.pem" See: > **[Secure communication with Elasticsearch | Filebeat Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/securing-communication-elasticsearch.html)** > **[Client certificate authentication](https://docs.search-guard.com/latest/client-certificate-auth)** > > How to use client side TLS certificates to protect Elasticsearch against unauthorized access. > **···** > > > Am 18.01.2019 um 17:37 schrieb Voortexx \: > > > > Elasticsearch and Search Guard version : 6.3.2 > > > > Entreprise Module : Disabled > > > > JVM Version : 1.8.0\_111 > > > > Operating System : Debian 9 > > > > I have a question because i didn't find any documentation about Beat in Search Guard main page. > > > > Actually we are using Kibana and Elasticsearch without Logstash. > > > > We don't need it because we only use Winlogbeat for the moment. > > > > So, does we have to use Logstash to make Search Guard works with Beat or it can funtionnate without it ? > > > > If yes is there any documentation to make Elasticsearch, Kibana, Searchguard and Beat work without Logstash ? > > > > Thanks for help ! > > > > -- > > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group. > > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com. > > To post to this group, send email to search-guard@googlegroups.com. > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/308ef842-1bde-4c7e-bd65-3adb79898d67%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/308ef842-1bde-4c7e-bd65-3adb79898d67%40googlegroups.com%5C). > > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C). ---
**Author:** ![Voortexx](https://avatars.discourse-cdn.com/v4/letter/v/ebca7d/32.png) [@Voortexx](https://forum.search-guard.com/u/Voortexx)\ **Post date:** [February 7, 2019, 9:26am UTC](https://forum.search-guard.com/t/how-search-guard-works-with-beat-without-logstash/1293/3 "2019-02-07T09:26:51Z")
Thanks for your reply, all is clear now !