# Filebeat does not send container logs to elastic cloud

**URL:** <https://discuss.elastic.co/t/filebeat-does-not-send-container-logs-to-elastic-cloud/285461>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [September 29, 2021, 10:10am UTC](https://discuss.elastic.co/t/filebeat-does-not-send-container-logs-to-elastic-cloud/285461 "2021-09-29T10:10:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sharadha\_Krishna](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sharadha_krishna/32/81258_2.png) [@Sharadha\_Krishna](https://discuss.elastic.co/u/Sharadha_Krishna)\
**Post date:** [September 29, 2021, 10:10am UTC](https://discuss.elastic.co/t/filebeat-does-not-send-container-logs-to-elastic-cloud/285461/1 "2021-09-29T10:10:45Z")

</div>

Hi,

I have set up log collection from docker containers running on EC2 machines to elastic cloud using file beat. But I don't find the logs on kibana.

Note: I have setup my own indexes and ILM and templates. I also find the logs of filebeat don't specify any issue as such. Pasting the configuration of filebeat and the indexes related snippets.

```auto

filebeat.inputs:
#------------------------------ Container input --------------------------------
- type: container
  enabled: true

  # Paths for container logs that should be crawled and fetched.
  paths:
    -/var/lib/docker/containers/*/*.log

  # Configure stream to filter to a specific stream: stdout, stderr or all (default)
  stream: all

# ================================= Processors =================================

processors:
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_host_metadata: ~
#
# =============================== Elastic Cloud ================================
cloud.id: "tazapay-dev:xxx"

cloud.auth: "elastic:xxx"

# ====================== Index Lifecycle Management (ILM) ======================

setup.ilm.enabled: false
setup.template.enabled: false
setup.template.name: "core-template"
setup.template.pattern: "core-*"

output.elasticsearch:
  indices:
    - index: "core"

```

TEMPLATE :

```auto
PUT _template/core-template
{
  "index_patterns": ["core-*"], 
  "settings": {
    "number_of_shards": 1,
    "index.lifecycle.name": "core", 
    "index.lifecycle.rollover_alias": "core" 
  }
}

```

INDEX :

```auto
PUT core-000001 
{
  "aliases": {
    "core":{
      "is_write_index": true
    }
  }
}

```

FILEBEAT LOGS:

pipeline/module.go:113 Beat name: ip-20-10-1-15  
[monitoring] log/log.go:142 Starting metrics logging every 30s  
instance/beat.go:473 filebeat start running.  
memlog/store.go:119 Loading data file of '/var/lib/filebeat/registry/filebeat' succeeded. Active transaction id=0  
memlog/store.go:124 Finished loading transaction log file for '/var/lib/filebeat/registry/filebeat'. Active transaction id=0  
[registrar] registrar/registrar.go:109 States Loaded from registrar: 0  
[crawler] beater/crawler.go:71 Loading Inputs: 1  
[input] log/input.go:164 Configured paths: [/-/var/lib/docker/containers/_/_.log] {"input\_id": "08243e87-463a-4814-bed0-823e8438cfe6"}  
[crawler] beater/crawler.go:141 Starting input (ID: 3876510880850742928)  
[crawler] beater/crawler.go:108 Loading and starting Inputs completed. Enabled inputs: 1

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 27, 2021, 12:11pm UTC](https://discuss.elastic.co/t/filebeat-does-not-send-container-logs-to-elastic-cloud/285461/2 "2021-10-27T12:11:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.