normally, if you’re using logstash you’d be logging locally and sending the logs to a central server using something like filebeat or rsyslog