# Data not coming in to Logstash

**URL:** https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272
**Category:** Logstash
**Created:** [September 4, 2017, 9:57am UTC](https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272 "2017-09-04T09:57:22Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)
#### Post date: [September 4, 2017, 9:57am UTC](https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272/1 "2017-09-04T09:57:22Z")

</div>

Hi,  
Have tried both winlogbeat and filebeat, get same problem.

I have configured an ELK-server that works just fine locally, now i am trying to send events from a remote server with winlogbeat or filebeat and the events will not be recieved.

Get this in the winlogbeat-agent:  
ERR Connecting error publishing events (retrying): dial tcp 192.168.1.1:5044: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection  
failed because connected host has failed to respond.

Winlogbeat config:  
winlogbeat.event\_logs:  
- name: Security  
output.logstash:  
hosts: ["192.168.1.1:5044"]

filebeat config:  
- input\_type: log  
- C:\Temp\*.log  
output.logstash:  
hosts: ["192.168.1.1:5044"]

This is the logstash input config:  
input {  
beats {  
port =\> 5044  
type =\> "log"  
}  
}

The firewall is open

Installed beat agent  
Configured the config file as above  
Started Service

Have working agents locally on ELK-server that works fine (index created for both filebeat and winlogbeat)

(Running ELK on a windows machine)

Do the filebeat service need to run as a windows service account, or should it work as local system?  
Do i need to configure Logstash to allow remote Connections?

Got stuck.. ☹

---

<div class="post-metadata">

### Author: ![Maekee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maekee/32/21708_2.png) [@Maekee](https://discuss.elastic.co/u/Maekee)
#### Post date: [September 4, 2017, 1:30pm UTC](https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272/2 "2017-09-04T13:30:39Z")

</div>

This was because our network technicians, dont ever trust them 🙂

---

<div class="post-metadata">

### Author: ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)
#### Post date: [September 4, 2017, 3:48pm UTC](https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272/3 "2017-09-04T15:48:21Z")

</div>

Lulz...

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 2, 2017, 3:48pm UTC](https://discuss.elastic.co/t/data-not-coming-in-to-logstash/99272/4 "2017-10-02T15:48:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
