> For the complete documentation index, see [llms.txt](https://ciusji.gitbook.io/leona/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ciusji.gitbook.io/leona/getting-in/log-sources/ingest-logs-manually/from-files.md).

# From Files

Log files come in many different formats, which can make them difficult to handle.

A highly recommended way to pick a log file from Windows or Linux systems is [filebeat](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-overview.html). 

A basic filebeat configuration for filebeat on Linux may look like the following:

```yaml
fields_under_root: true
fields.collector_node_id: ${sidecar.nodeName}
fields.gl2_source_collector: ${sidecar.nodeId}

filebeat.inputs:
- input_type: log
  paths:
    - /var/log/*.log
  type: log
output.logstash:
   hosts: ["leona:5044"]
path:
  data: /var/lib/graylog-sidecar/collectors/filebeat/data
  logs: /var/lib/graylog-sidecar/collectors/filebeat/log
```