# Filebeat in windows 2008 r2 - not sending data to logstash

**URL:** <https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 22, 2016, 12:54pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878 "2016-01-22T12:54:41Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![vishnu.music](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@vishnu.music](https://discuss.elastic.co/u/vishnu.music)\
**Post date:** [January 22, 2016, 12:54pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/1 "2016-01-22T12:54:42Z")

</div>

Hello,

I installed filebeat 1.0.1 in my windows 2008 r2 server. I have configured the below path and logstash server output

```
  paths:
    - C:\Documentum\dba\*.log

```

logstash:  
# The Logstash hosts  
hosts: ["10.10.10.15:5044"]

Port 5044 is open in my logstash server 10.10.10.15 and one of my linux client where I have installed filebeat is behaving well and sending data to the same logstash server. I also checked to make sure there are no unwanted tab space in the yml file.

This is the output that I get when running filebeat in -v mode.

PS C:\Program Files\Filebeat\> .\filebeat.exe -c filebeat.yml -e -v  
2016/01/22 12:41:15.359008 geolite.go:24: INFO GeoIP disabled: No paths were set under output.geoip.paths  
2016/01/22 12:41:15.361938 outputs.go:111: INFO Activated logstash as output plugin.  
2016/01/22 12:41:15.362915 publish.go:249: INFO Publisher name: ARM-RD-W8X-D671  
2016/01/22 12:41:15.367799 beat.go:107: INFO Init Beat: filebeat; Version: 1.0.1  
2016/01/22 12:41:15.369753 beat.go:133: INFO filebeat sucessfully setup. Start running.  
2016/01/22 12:41:15.370730 registrar.go:66: INFO Registry file set to: C:\ProgramData\filebeat\registry  
2016/01/22 12:41:15.371706 registrar.go:76: INFO Loading registrar data from C:\ProgramData\filebeat\registry  
2016/01/22 12:41:15.372683 spooler.go:77: INFO Starting spooler: spool\_size: 1024; idle\_timeout: 5s  
2016/01/22 12:41:15.373660 crawler.go:78: INFO All prospectors initialised with 0 states to persist  
2016/01/22 12:41:15.373660 registrar.go:83: INFO Starting Registrar  
2016/01/22 12:41:15.374637 filebeat.go:122: INFO Start sending events to output

Filebeat log files are also not generated. Could you please let me know what could be wrong?

Thanks,  
Vishnu

---

<div class="post-metadata">

**Author:** ![vishnu.music](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@vishnu.music](https://discuss.elastic.co/u/vishnu.music)\
**Post date:** [January 22, 2016, 1:02pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/2 "2016-01-22T13:02:20Z")

</div>

Sorry, it was my mistake. filebeat was running fine. But the path was wrong, so I did not see expected communication between the filebeat host and logstash server.

But I still dont know why I am not seeing filebeat log files in C:\ProgramData\filebeat\Logs

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [January 23, 2016, 5:00pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/3 "2016-01-23T17:00:48Z")

</div>

> Filebeat log files are also not generated. Could you please let me know what could be wrong?

What does your Filebeat command line look like?

---

<div class="post-metadata">

**Author:** ![vishnu.music](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@vishnu.music](https://discuss.elastic.co/u/vishnu.music)\
**Post date:** [January 25, 2016, 2:18pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/4 "2016-01-25T14:18:52Z")

</div>

.\filebeat.exe -c filebeat.yml -e -v -d "\*"

I tried this and filebeat is sending data to my logstash server. The logs are not created even when I start filebeat from services.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [January 25, 2016, 6:31pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/5 "2016-01-25T18:31:02Z")

</div>

That indicates that your filebeat.yml doesn't configure logging properly. See [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html#configuration-logging](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html#configuration-logging) for details.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:56pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-2008-r2-not-sending-data-to-logstash/39878/6 "2017-07-05T21:56:22Z")

</div>


