# Bug? Logstash Ouput & Initial Fleet Setup **URL:** \ **Category:** Beats\ **Tags:** fleet\ **Created:** [July 27, 2022, 12:56pm UTC](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751 "2022-07-27T12:56:07Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![DefensiveDepth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/defensivedepth/32/110034_2.png) [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Post date:** [July 27, 2022, 12:56pm UTC](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751/1 "2022-07-27T12:56:07Z")
Fleet 8.3.2, fresh install. I have a Fleet Server Policy that uses a Logstash ouput: ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/f/2fc121680f0bba40146b6d942a41e19794828273.png) From the guided install/generated CLI text, it appears that it does not take into account the Logstash output as it sets the `--fleet-server-es=` to the Logstash output - which does not work with the generated ES token. Or maybe I'm missing something? How is Fleet Server supposed to connect? Can it use the Logstash output or does it need to connect directly to ES via the token? ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/9/1970cf0f0f586310b6ac61f12044be74081b1d48.png) ---
**Author:** ![nchaulet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nchaulet/32/77896_2.png) [@nchaulet](https://discuss.elastic.co/u/nchaulet)\ **Post date:** [July 27, 2022, 3:23pm UTC](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751/2 "2022-07-27T15:23:14Z")
> [@DefensiveDepth](#): > > From the guided install/generated CLI text, it appears that it does not take into account the Logstash output as it sets the `--fleet-server-es=` to the Logstash output - which does not work with the generated ES token. Hi @DefensiveDepth Yes it seems a bug Fleet server es should be the address of ES here, I am going to open a bug on our side (bug created here: [[Fleet] Instruction to setup Fleet server are not correct with a logstash default output · Issue #137304 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/137304)), in the mean time if you replace this address by your ES host it should unlock you. Thanks for reporting this ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 24, 2022, 5:24pm UTC](https://discuss.elastic.co/t/bug-logstash-ouput-initial-fleet-setup/310751/3 "2022-08-24T17:24:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.