# Cannot log to logstash when xpack security is enabled

**URL:** <https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348>\
**Category:** Logstash\
**Tags:** elastic-stack-security\
**Created:** [July 31, 2020, 12:09pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348 "2020-07-31T12:09:15Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Beefstew](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@Beefstew](https://discuss.elastic.co/u/Beefstew)\
**Post date:** [July 31, 2020, 12:09pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/1 "2020-07-31T12:09:15Z")

</div>

Hi  
I am running Elk 7.0.0 on Windows server 2016  
As soon as I set xpack.security.enabled: true in Elasticsearch.yml logging fails from wionlogbeat clients.  
What config changes do I need to make in the winlogbeat.yml file for this to work?  
Thanks

---

<div class="post-metadata">

**Author:** ![Beefstew](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@Beefstew](https://discuss.elastic.co/u/Beefstew)\
**Post date:** [July 31, 2020, 12:52pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/2 "2020-07-31T12:52:59Z")

</div>

Does anyone actually post replies in these forums?

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [August 3, 2020, 7:35pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/4 "2020-08-03T19:35:14Z")

</div>

Well if you provided information about your configuration, and showed what errors you are getting folks might have something to work with.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 3, 2020, 10:57pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/5 "2020-08-03T22:57:23Z")

</div>

You also asked this during the weekend, when most people will be away from anything related to work. Patience is important.

As mentioned, you've provided no logs, no config files that you've altered, so it's very hard to assist.

---

<div class="post-metadata">

**Author:** ![Beefstew](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@Beefstew](https://discuss.elastic.co/u/Beefstew)\
**Post date:** [August 4, 2020, 8:09am UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/6 "2020-08-04T08:09:44Z")

</div>

And you only asked for them just now so its a good job I posted my 2nd comment eh!

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [August 4, 2020, 8:22am UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/7 "2020-08-04T08:22:53Z")

</div>

There are people here who spend their free time trying to help others solve their Logstash problems. Maybe you should spend less of _your_ time criticising them. Most people know that a more detailed problem report makes the debugging easier without being told 🙂

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [August 4, 2020, 8:24am UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/8 "2020-08-04T08:24:31Z")

</div>

I would suggest you read [https://www.elastic.co/help/](https://www.elastic.co/help/), we can only help you as much as you help us.

---

<div class="post-metadata">

**Author:** ![Beefstew](https://avatars.discourse-cdn.com/v4/letter/b/e9a140/32.png) [@Beefstew](https://discuss.elastic.co/u/Beefstew)\
**Post date:** [August 4, 2020, 3:57pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/9 "2020-08-04T15:57:22Z")

</div>

Resolved, ssshhh Jenni

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [August 4, 2020, 4:04pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/10 "2020-08-04T16:04:30Z")

</div>

If you really want to improve the content of this forum, you could maybe post _ **how** _ it was resolved, so the next person, who struggles with the same problem, googles and finds this post, won't _suffer_ the way you did 😉

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2020, 4:04pm UTC](https://discuss.elastic.co/t/cannot-log-to-logstash-when-xpack-security-is-enabled/243348/11 "2020-09-01T16:04:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
