# Failed to excute logstash

**URL:** <https://discuss.elastic.co/t/failed-to-excute-logstash/223341>\
**Category:** Logstash\
**Created:** [March 12, 2020, 1:57pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341 "2020-03-12T13:57:10Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Youssef\_SBAI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/youssef_sbai/32/64242_2.png) [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Post date:** [March 12, 2020, 1:57pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/1 "2020-03-12T13:57:10Z")

</div>

```
 Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, 
 :exception=>"LogStash::PluginLoadingError", :message=>"Couldn't find any input 
 plugin named 'filebeat'. Are you sure this is correct? Trying to load the filebeat input 
 plugin resulted in this error: no such file to load -- logstash/inputs/filebeat", 
:backtrace=>["/usr/share/logstash/logstash- 
core/lib/logstash/plugins/registry.rb:211:in `lookup_pipeline_plugin'", 
"/usr/share/logstash/logstash-core/lib/logstash/plugin.rb:137:in `lookup'", 
"org/logstash/plugins/PluginFactoryExt.java:222:in `plugin'", 
"org/logstash/plugins/PluginFactoryExt.java:181:in `plugin'", 
 "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:71:in `plugin'", " 
  (eval):8:in 
 `<eval>'", "org/jruby/RubyKernel.java:994:in `eval'", "/usr/share/logstash/logstash- 
   core/lib/logstash/pipeline.rb:49:in `initialize'", "/usr/share/logstash/logstash- 
  core/lib/logstash/pipeline.rb:90:in `initialize'", "/usr/share/logstash/logstash- 
   core/lib/logstash/pipeline_action/create.rb:43:in `block in execute'", 
 "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:94:in `block in exclusive'", 
"org/jruby/ext/thread/Mutex.java:148:in `synchronize'", 
"/usr/share/logstash/logstash-core/lib/logstash/agent.rb:94:in `exclusive'", 
 "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:39:in 
`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:327:in `block in 
 converge_state'"]}
```

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [March 12, 2020, 2:13pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/2 "2020-03-12T14:13:19Z")

</div>

Hi @Youssef_SBAI - There is no input plugin named `filebeat` in the list of Logstash input plugins available. Did you mean to use the `beats` [input plugin](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html)?

---

<div class="post-metadata">

**Author:** ![Youssef\_SBAI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/youssef_sbai/32/64242_2.png) [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Post date:** [March 12, 2020, 2:30pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/3 "2020-03-12T14:30:06Z")

</div>

Thank you i use the beats input but i have this error

```
 NFO [monitoring]	log/log.go:145	Non-zero metrics in the last 30s	 
{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":140,"time": 
{"ms":2}},"total":{"ticks":570,"time":{"ms":10},"value":570},"user":{"ticks":430,"time": 
{"ms":8}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":5},"info": 
{"ephemeral_id":"25ac1579-593f-48c1-8bf5-4c689b5437f9","uptime": 
{"ms":1350049}},"memstats": 
{"gc_next":7435872,"memory_alloc":3726160,"memory_total":23899080},"runtime": 
{"goroutines":15}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat": 
{"config":{"module":{"running":0}},"pipeline":{"clients":0,"events": 
{"active":0}}},"registrar":{"states":{"current":0}},"system":{"load": 
{"1":0.45,"15":0.59,"5":0.54,"norm":{"1":0.1125,"15":0.1475,"5":0.135}}}}}}
```

---

<div class="post-metadata">

**Author:** ![Fabio-sama](https://avatars.discourse-cdn.com/v4/letter/f/b9e5f3/32.png) [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Post date:** [March 12, 2020, 2:52pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/4 "2020-03-12T14:52:42Z")

</div>

It's not an error. It is simply telling you that it's not receiveing anything. You sure that filebeat is sending data to LS?

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [March 13, 2020, 1:21am UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/5 "2020-03-13T01:21:50Z")

</div>

These are the monitoring logs/metrics from Filebeat - there are not error messages. I can see that no files are being harvested by Filebeat (hence no events sent to Logstash). I suggest you review your [Filebeat configuration](https://www.elastic.co/guide/en/beats/filebeat/current/configuring-howto-filebeat.html). If you need further assistance, let us know.

---

<div class="post-metadata">

**Author:** ![Youssef\_SBAI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/youssef_sbai/32/64242_2.png) [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Post date:** [March 13, 2020, 8:02am UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/6 "2020-03-13T08:02:03Z")

</div>

I use this config for filebeat:

```
filebeat.prospectors:
 - input_type: log
 enabled: true

 paths:
- /data/volumes/monitoring/logstash/logCtrlM/GM_NY040_JOBS-PLAN-COURANT_7J_A070320_20200307100100.csv  
 output.logstash:
 hosts: ["logstash:5044"]
```

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [March 13, 2020, 1:27pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/7 "2020-03-13T13:27:56Z")

</div>

@Youssef_SBAI - Can you run Filebeat with [debug logging enabled](https://www.elastic.co/guide/en/beats/filebeat/current/enable-filebeat-debugging.html) and share the debug logs? For example, you can run `filebeat -e -d "*"`.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2020, 1:28pm UTC](https://discuss.elastic.co/t/failed-to-excute-logstash/223341/8 "2020-04-10T13:28:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
