# Can't send logs from filebeats to logstash

**URL:** <https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 23, 2019, 10:23am UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492 "2019-08-23T10:23:31Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rajdeep101](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\
**Post date:** [August 23, 2019, 10:23am UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/1 "2019-08-23T10:23:31Z")

</div>

Filebeats wont let me exclude output.elasticsearch from filebeat.yml and would give and error "_Exiting: Index management requested but the Elasticsearch output is not configured/enabled_".

The setup runs without error when i comment out output.logstash but kibana doesnot register any logs. I am trying to test a sample log data (apache-access-logs) on my localhost. i am very new to all this.

 ![logstash_output](https://us1.discourse-cdn.com/elastic/original/3X/2/c/2cb1cf24f119d8a1abfea14f5323e3d65ea51516.png) ![filter](https://us1.discourse-cdn.com/elastic/original/3X/2/0/20cc797e9fe816b5097cbef3c5bfc8fa0fe307a0.png) ![filebeatyml](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a9bdc6339c21544871168e1106aca17cd0f3812d.png) ![02-beats-input(into%20logstash)](https://us1.discourse-cdn.com/elastic/original/3X/5/e/5e21e41f266ea0d03515d8510bb43490ee73b829.png)

Here i am attaching screenshots for my filebeat.yml file and logstash config files (input, filter and output).

---

<div class="post-metadata">

**Author:** ![Antoine.E](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/antoine.e/32/41348_2.png) [@Antoine.E](https://discuss.elastic.co/u/Antoine.E)\
**Post date:** [August 23, 2019, 2:30pm UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/2 "2019-08-23T14:30:20Z")

</div>

Hello Rajdeep,

I think the problem with your filebeat.yml is that you are trying to manage shards number with the "setup.template.settings" and as you are not configuring an Elasticsearch output an error is popping up, could you try to comment this part of the configuration ?

Antoine

---

<div class="post-metadata">

**Author:** ![payneb25827](https://avatars.discourse-cdn.com/v4/letter/p/e5b9ba/32.png) [@payneb25827](https://discuss.elastic.co/u/payneb25827)\
**Post date:** [August 23, 2019, 8:33pm UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/3 "2019-08-23T20:33:46Z")

</div>

I have the same problem actually, and my config is simply:

```
filebeat.inputs:
- type: log
  paths:
    - c:\elk\logs\test.log

output.logstash:
  hosts: ["localhost:5044"]
```

---

<div class="post-metadata">

**Author:** ![kumarabhi](https://avatars.discourse-cdn.com/v4/letter/k/6a8cbe/32.png) [@kumarabhi](https://discuss.elastic.co/u/kumarabhi)\
**Post date:** [August 23, 2019, 11:20pm UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/4 "2019-08-23T23:20:59Z")

</div>

@payneb25827 @rajdeep101  
To keep things simple, it's better to just output the logstash to stdout. Below is the configuration for logstash.

input {  
beats {  
port =\> 5044  
}  
}

```
output {
  stdout { 
    codec => rubydebug { } 
  }
}

```

Filebeat config:

```
#----------------------------- Logstash output --------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["localhost:5044"]

```

The elastic search output from filebeat should be disabled

```
#-------------------------- Elasticsearch output ------------------------------
#output.elasticsearch:
  # Array of hosts to connect to.
  #hosts: ["localhost:9200"]
```

---

<div class="post-metadata">

**Author:** ![rajdeep101](https://avatars.discourse-cdn.com/v4/letter/r/50afbb/32.png) [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\
**Post date:** [August 24, 2019, 6:41am UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/5 "2019-08-24T06:41:37Z")

</div>

Hi Antoine  
I get the same error _Exiting: Index management requested but the Elasticsearch output is not configured/enabled_ while running

> Blockquote sudo filebeat setup

Although in kibana while adding log data from `Add logs from logstash` It shows data successfully imported. But i guess it is just importing the syslog data somehow as the logs Dashboard makes no sense and it is only capturing the elasticsearch and logstash logs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 21, 2019, 6:41am UTC](https://discuss.elastic.co/t/cant-send-logs-from-filebeats-to-logstash/196492/6 "2019-09-21T06:41:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.