# FileBeat is not sending logfile to logstash **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [January 18, 2019, 11:59am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784 "2019-01-18T11:59:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![nitin.jangid](https://avatars.discourse-cdn.com/v4/letter/n/919ad9/32.png) [@nitin.jangid](https://discuss.elastic.co/u/nitin.jangid)\ **Post date:** [January 18, 2019, 11:59am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/1 "2019-01-18T11:59:43Z")
Hi there, I am trying to ingest log data into logstash using filebeat. For that I have made filebeat as service in my system localhost and configured with path of log file and logstash host in filebeat.yml. filebeat.yml below: ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bc809e13f75ca7bd1f1a8c8f9c6ed5a86e90aacf.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a9601ec50b4e4b9c37c39cf51dc7cde6bb6277c6.png) I have been running filebeat service in my system. Here is logstash config file for filebeat below: ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/7/879a0844703ccc25660b5a4a5c712a5b3f693896.png) Here is the logstash console: ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/0/209e41e837d2bebb1e09313af13475d853d807ac.png) In lostash config file, as I am printing log data in logstash console and sending data in elastic search, both output task is not working, and i dont see any error in logstash console. Please help, thanks in advance. ---
**Author:** ![Tek\_Chand](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tek_chand/32/34318_2.png) [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Post date:** [January 18, 2019, 12:05pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/2 "2019-01-18T12:05:33Z")
@nitin.jangid, Are you running filebeat and logstash over same server? Because you have set `localhost:5044` in your `output.logstash`. Also please run the below command from your filebeat system if you are running logstash over same system: ```auto telnet 127.0.0.1 5044 ``` Also please check filebeat service is running or not. Please confirm. Thanks. ---
**Author:** ![nitin.jangid](https://avatars.discourse-cdn.com/v4/letter/n/919ad9/32.png) [@nitin.jangid](https://discuss.elastic.co/u/nitin.jangid)\ **Post date:** [January 18, 2019, 12:15pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/3 "2019-01-18T12:15:39Z")
@Tek_Chand, Yes I am running filebeat and logstash over same server. I ran command "telnet 127.0.0.1 5044" in cmd. I am getting blank screen in cmd. ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/7/f7b58fa8b867ee8fe8d59cddeb31a2c5096f15f1.png) As you can see filebeat is running. ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/084ac52691d638035051fca801d52a1ae98c7053.png) Thanks ---
**Author:** ![Tek\_Chand](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tek_chand/32/34318_2.png) [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Post date:** [January 18, 2019, 12:20pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/4 "2019-01-18T12:20:39Z")
@nitin.jangid, Are you getting logs in your `tomcatlog.log` file? Thanks. ---
**Author:** ![nitin.jangid](https://avatars.discourse-cdn.com/v4/letter/n/919ad9/32.png) [@nitin.jangid](https://discuss.elastic.co/u/nitin.jangid)\ **Post date:** [January 18, 2019, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/5 "2019-01-18T14:03:13Z")
@Tek_Chand, Yes I have log records in tomcatLog.log file. these are the records in tomcatLog file. "122.164.121.231 - - [23/Nov/2015:07:19:54 -0500] "GET /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.1 (X11; Ubuntu; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" "122.164.121.232 - - [24/Nov/2015:07:19:54 -0500] "POST /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.2 (X11; Windows; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" "122.164.121.233 - - [25/Nov/2015:07:19:54 -0500] "PUT /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.3 (X11; Ubuntu; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" "122.164.121.234 - - [26/Nov/2015:07:19:54 -0500] "DELETE /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.4 (X11; Windows; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" "122.164.121.235 - - [27/Nov/2015:07:19:54 -0500] "FATCH /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.5 (X11; Ubuntu; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" "122.164.121.236 - - [28/Nov/2015:07:19:54 -0500] "GET /configs/config/thecelloserenades@gmail.com HTTP/1.1" 200 1135 "[http://localhost/octoviz-auth/public/octoviz/admin/admin.html](http://localhost/octoviz-auth/public/octoviz/admin/admin.html)" "Mozilla/5.6 (X11; Windows; Linux x86\_64; rv:39.0) Gecko/20100101 Firefox/39.0" ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 15, 2019, 2:03pm UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logfile-to-logstash/164784/6 "2019-02-15T14:03:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.