# Filebeat not able to send all logs

**URL:** <https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/273405>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 19, 2021, 12:50pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/273405 "2021-05-19T12:50:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mangeshmj1992](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Post date:** [May 19, 2021, 12:50pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/273405/1 "2021-05-19T12:50:05Z")

</div>

Hello all,  
I am using filebeat 7.9.3. Recently we did load testing on our server almost 4 hours. During load testing almost 1 and GB files created every hour. File rotation policy is after every 1 hour.

Before load testing for every 1 hour log file size is almost 300 to 400 MB.

I am sending logs to logstash -\> Elasticsearch-\>Kibana. But we didn't get all logs generated during load test in kibana.

PFB filebeat.yml

```
filebeat.inputs:

- type: log
  enabled: true
  paths:
	- /apps/applog/01/logs/jd.log
	- /apps/applog/02/logs/jd.log
	- /apps/applog/03/logs/jd.log
	- /apps/applog/04/logs/jd.log

  multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
  multiline.negate: true
  multiline.match: after
  fields_under_root: true
  fields:
labels.kind: cs
labels.app_source: r3-cs
labels.environment: uat

close_renamed: true

output.logstash:
  hosts: ["localhost:5044"]
  ssl.certificate_authorities: "/etc/filebeat/local.pem"

```

Please help with this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 16, 2021, 2:50pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-all-logs/273405/2 "2021-06-16T14:50:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.