# Elastic doesn't harvesting specifics logs types from specific machines

**URL:** <https://discuss.elastic.co/t/elastic-doesnt-harvesting-specifics-logs-types-from-specific-machines/106017>\
**Category:** Elasticsearch\
**Created:** [November 1, 2017, 10:24am UTC](https://discuss.elastic.co/t/elastic-doesnt-harvesting-specifics-logs-types-from-specific-machines/106017 "2017-11-01T10:24:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaked571](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaked571/32/23975_2.png) [@shaked571](https://discuss.elastic.co/u/shaked571)\
**Post date:** [November 1, 2017, 10:24am UTC](https://discuss.elastic.co/t/elastic-doesnt-harvesting-specifics-logs-types-from-specific-machines/106017/1 "2017-11-01T10:24:49Z")

</div>

my team use ELK to control our logs.  
We have about 30 different log types, that we are sending both from our grid machines and both from our client side machines.  
The client side machines work with filebeat--\>logstash--\>elastic--\>Kibana  
From some reason 2 specific types is not appearing in Kibana from the UAT and Prod machines.  
but, when i setup my personal machines and copy the filebeat.yml from them it worked perfectly, and also it works fine in the QA machine.  
I already tried to do a diff between the configuration files and they are really the same. Also the path and the logs i tried to sent is the same but still it work from only part of the machines.  
when i tried to debug the filebeat service over UAT i didnt see an atemmt to harvest this specific logs - but because this machine works with a big amount of paths and logs im not sure if it is a good indication.

my idea is to change the config from:  
filebeat--\>logstash--\>elastic--\>Kibana  
**to** :  
filebeat--\> **Rabbitmq** --\>logstash--\>elastic--\>Kibana

i didn't find the right syntax to do so. i saw this page:  
[filebeat\_config\_options](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html)  
but rabbitmq is not one of them. is there any way to do so?

---

<div class="post-metadata">

**Author:** ![shaked571](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaked571/32/23975_2.png) [@shaked571](https://discuss.elastic.co/u/shaked571)\
**Post date:** [November 1, 2017, 1:44pm UTC](https://discuss.elastic.co/t/elastic-doesnt-harvesting-specifics-logs-types-from-specific-machines/106017/2 "2017-11-01T13:44:52Z")

</div>

i saw this discussion:  
[https://discuss.elastic.co/t/filebeat-rabbitmq-plugin/55189](https://discuss.elastic.co/t/filebeat-rabbitmq-plugin/55189)  
that answer my question  
**TL;DR**  
you cant sent logs from Filebeat to RabbitMQ

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 29, 2017, 1:45pm UTC](https://discuss.elastic.co/t/elastic-doesnt-harvesting-specifics-logs-types-from-specific-machines/106017/3 "2017-11-29T13:45:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.