For most of the files when log data is shipping then it is done through Filebeat. The segment Filebeat monitors are log directories, log files and many more. File beat executes or forwards them to Elasticsearch or Logstash. File beat is installed on your service as an agent and it is generally all log data shipper for files available.
