# Filebeat is not sending new events to logstash
**URL:** https://discuss.elastic.co/t/filebeat-is-not-sending-new-events-to-logstash/288190
**Category:** Beats
**Tags:** filebeat
**Created:** [November 2, 2021, 5:56am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-new-events-to-logstash/288190 "2021-11-02T05:56:56Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Mobin](https://discuss.elastic.co/u/Mobin)
#### Post date: [November 2, 2021, 5:56am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-new-events-to-logstash/288190/1 "2021-11-02T05:56:56Z")
We have created an elastic stack to monitor logs from the Linux clients. On Linux clients, filebeat is configured to ship the logs to the elastic stack.
But our filebeat is not detecting new events in the log file and not sending to elastic stack. If we restart the filebeat, It will send all the pending events. On filebeat logs, we are getting the below message
INFO No non-zero metrics in the last 30s.
logstash input:-
```auto
input {
beats {
port => 5044
ssl => false
}
}
```
logstash filter:-
```auto
filter
{
if [type] == "syslog" {
grok {
match => { "message" => "%{SYSLOGLINE}" }
}
date {
match => ["timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]
}
}
}
```
logstash output:-
```auto
output {
elasticsearch {
hosts => ["localhost:9200"]
sniffing => true
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
```
filebeat config:-
```auto
filebeat.prospectors:
- input_type: log
paths:
- /var/log/messages
- /var/log/secure
output.logstash:
hosts: ["172.x.x.x:5044"]
```
filebeat log:-
tail /var/log/filebeat/filebeat
2021-11-02T04:59:06Z INFO No non-zero metrics in the last 30s
2021-11-02T04:59:36Z INFO No non-zero metrics in the last 30s
2021-11-02T05:00:06Z INFO No non-zero metrics in the last 30s
2021-11-02T05:00:36Z INFO No non-zero metrics in the last 30s
2021-11-02T05:01:06Z INFO No non-zero metrics in the last 30s
2021-11-02T05:01:36Z INFO No non-zero metrics in the last 30s
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 30, 2021, 7:57am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-new-events-to-logstash/288190/2 "2021-11-30T07:57:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.