# Docker Container Logstash not getting any logs

**URL:** <https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062>\
**Category:** Logstash\
**Created:** [July 6, 2017, 9:28am UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062 "2017-07-06T09:28:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![philippkahr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/philippkahr/32/100137_2.png) [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Post date:** [July 6, 2017, 9:28am UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062/1 "2017-07-06T09:28:29Z")

</div>

Hallo,

I have a weird problem regarding docker with logstash. I have a logstash configuration which is working. Logstash is also booting up properly. Sadly it doesnt output anything to stdout or to my GELF output.  
docker command.:

> docker run -p 1535:1535/udp --link graylog:graylog -v /graylog/data/logstash:/usr/share/logstash/data -v /srv/logstash/config-dir:/config-dir -e TZ=Europe/Vienna --name=logstash pkahr/docker-logstash-gelf -f /config-dir/logstash.conf

logstash config

> root@log ~ # cat /srv/logstash/config-dir/logstash.conf  
> input {  
> udp {  
> host =\> localhost  
> port =\> 1535  
> codec =\> netflow {  
> versions =\> [10]  
> target =\> ipfix  
> }  
> type =\> ipfix  
> }  
> tcp {  
> host =\> localhost  
> port =\> 4739  
> codec =\> netflow {  
> versions =\> [10]  
> target =\> ipfix  
> }  
> type =\> ipfix  
> }  
> }

> output {  
> stdout { codec =\> rubydebug }  
> gelf {  
> host =\> 'graylog'  
> port =\> 12202  
> }  
> }

i seriously have no idea what the problem actually is.  
if i create a bash inside the container i can see with tcpdump that traffic is arriving. So traffic should be accessible by logstash.

It relates to that issue.: [Netflow Logstash V9 not working not getting any logs - #9 by jorritfolmer](https://discuss.elastic.co/t/netflow-logstash-v9-not-working-not-getting-any-logs/91228/9) but we solved the Netflow Issue there, so the processing of this should be possible.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 9, 2017, 7:01pm UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062/2 "2017-07-09T19:01:45Z")

</div>

> host =\> localhost

I'm pretty sure this should be removed.

Also, are you receiving netflow data over UDP or TCP? You're only publishing the UDP port to the host.

---

<div class="post-metadata">

**Author:** ![philippkahr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/philippkahr/32/100137_2.png) [@philippkahr](https://discuss.elastic.co/u/philippkahr)\
**Post date:** [July 10, 2017, 5:21am UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062/3 "2017-07-10T05:21:06Z")

</div>

Hallo Magnus,

basically the "host =\> localhost" did the trick. I feel so silly right now. Thank you very much!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2017, 5:21am UTC](https://discuss.elastic.co/t/docker-container-logstash-not-getting-any-logs/92062/4 "2017-08-07T05:21:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.