Where is log storage in Elasticsearch?

In Elasticsearch, the logs of the service itself are usually stored in the file system of the server where Elasticsearch is running. By default, logs are located in the logs directory within the Elasticsearch installation directory (for example, /var/log/elasticsearch/ on Linux).

For storing application logs and data that are indexed in Elasticsearch, indices within Elasticsearch are used — these are not files, but data structures distributed across clusters. Thus, logs as data are stored in Elasticsearch indices, while the system logs of Elasticsearch itself are stored in the file system.