# Filebeat is not sending data to Elasticsearch

**URL:** <https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 14, 2018, 2:07pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915 "2018-03-14T14:07:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![solo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/solo/32/29084_2.png) [@solo](https://discuss.elastic.co/u/solo)\
**Post date:** [March 14, 2018, 2:07pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915/1 "2018-03-14T14:07:12Z")

</div>

I have a standard Ubuntu 17.10 installation.  
I've installed elasticsearch, kibana and filebeat.  
Filebeat is processing data from a log file named fuse.log, but it is not sending it to Elasticsearch.  
I'm not sure where it is sending it...

Log output: [https://pastebin.com/5Y7tByxn](https://pastebin.com/5Y7tByxn)

Here is my /etc/filebeat/filebeat.yml:

```
#=========================== Filebeat prospectors =============================

filebeat.prospectors:

# Each - is a prospector. Most options can be set at the prospector level, so
# you can use different prospectors for various configurations.
# Below are the prospector specific configurations.

- type: log

  # Change to true to enable this prospector configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /home/sindre/Temp/FileBeatInput/*.log
    #- c:\programdata\elasticsearch\logs\*

#============================= Filebeat modules ===============================

filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 60s

#==================== Elasticsearch template setting ==========================

setup.template.settings:
  index.number_of_shards: 3
  #index.codec: best_compression
  #_source.enabled: false

# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
setup.kibana:

  # Kibana Host
  # Scheme and port can be left out and will be set to the default (http and 5601)
  # In case you specify and additional path, the scheme is required: http://localhost:5601/path
  # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601
host: "localhost:5601"

#================================ Outputs =====================================

# Configure what output to use when sending the data collected by the beat.

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["localhost:9200"]

  # Optional protocol and basic auth credentials.
  #protocol: "https"
  #username: "elastic"
  #password: "changeme"
```

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 15, 2018, 11:53am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915/2 "2018-03-15T11:53:24Z")

</div>

The part of the log you shared all looks normal. Why do you think the data does not arrive on the Elasticsearch side?

---

<div class="post-metadata">

**Author:** ![solo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/solo/32/29084_2.png) [@solo](https://discuss.elastic.co/u/solo)\
**Post date:** [March 15, 2018, 2:46pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915/3 "2018-03-15T14:46:42Z")

</div>

I managed to get it working.  
It was the user owner of the folders in Linux.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 12, 2018, 2:47pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-elasticsearch/123915/4 "2018-04-12T14:47:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.