# After a while the logs stop

**URL:** <https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030>\
**Category:** Elasticsearch\
**Created:** [March 30, 2022, 5:40am UTC](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030 "2022-03-30T05:40:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arraso26](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arraso26/32/103214_2.png) [@Arraso26](https://discuss.elastic.co/u/Arraso26)\
**Post date:** [March 30, 2022, 5:40am UTC](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030/1 "2022-03-30T05:40:43Z")

</div>

Hello, my problem for half an hour the logs arrive perfect but after about 30 minutes or so the logs stop arriving and I get all the time the log shown below or one very similar and the rest of the logs do not arrive, I also leave my configuration files to see if you see something that I do not see.

 ![prueba](https://us1.discourse-cdn.com/elastic/original/3X/5/6/56f9ff43186c4d11655d56c3c24d8c748140a494.png)  
 ![prueba2](https://us1.discourse-cdn.com/elastic/original/3X/5/c/5cd677eecbc17e708ba68fd0a8d99c70af1783de.png)

**docker-compose.yml**

```auto
version: '3.7'

services:
  elasticsearch:
    image: elasticsearch:7.9.2
    ports:
      - '9200:9200'
    environment:
      - discovery.type=single-node
    ulimits:
      memlock:
        soft: -1
        hard: -1

  kibana:
    image: kibana:7.9.2
    ports:
      - '5601:5601'

  logstash:
    image: logstash:7.9.2
    ports:
      - '5044:5044'
    volumes:
      - type: bind
        source: ./logstash_pipeline/
        target: /usr/share/logstash/pipeline
        read_only: true

```

**logstash\_pipeline/ports.conf**

```auto
input {
beats {
port => 5044
}
}

output {
elasticsearch {
 hosts => ["192.168.14.59:9200"]
     manage_template => false
     index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}

```

**Client filebeat**

```auto
- type: log
  paths:
    - /server/www/html/log.es/logs/access.log
    - /server/www/html/log.es/logs/error.log
    - /server/www/html/log.es/logs/error.log
    - /server/www/html/log.es/logs/access.log
filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false

setup.template.settings:
  index.number_of_shards: 3

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 7
  permissions: 0640
output.logstash:
  hosts: ["publicip:5044"]

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 30, 2022, 11:49pm UTC](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030/2 "2022-03-30T23:49:48Z")

</div>

Please don't post pictures of text, logs or code. They are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2022, 11:50pm UTC](https://discuss.elastic.co/t/after-a-while-the-logs-stop/301030/3 "2022-04-27T23:50:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.