# Filebeat not collecting all logs

**URL:** <https://discuss.elastic.co/t/filebeat-not-collecting-all-logs/326694>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 28, 2023, 4:17pm UTC](https://discuss.elastic.co/t/filebeat-not-collecting-all-logs/326694 "2023-02-28T16:17:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Norsu296](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norsu296/32/111875_2.png) [@Norsu296](https://discuss.elastic.co/u/Norsu296)\
**Post date:** [February 28, 2023, 4:17pm UTC](https://discuss.elastic.co/t/filebeat-not-collecting-all-logs/326694/1 "2023-02-28T16:17:13Z")

</div>

I have issue with filebeat. I'm using autodiscover for kubernetes. Filebeat is collecting logs and sending them to elastic and they are visible in kibana. Some logs are not sending and I don't understand why. I see in Kibana log:

```
Starting Application using Java 17.0.5 on....

```

but I don't see in kibana

```
Error starting ApplicationContext. To display the conditions report re-run your application with ....

```

My filebeat.yaml

```auto

filebeat.yml: |-
filebeat.shutdown_timeout: 300s

filebeat.autodiscover:
  providers:
    - type: kubernetes
      templates:
        - condition:
            equals:
              kubernetes.namespace: {{ .Release.Namespace }}
          config:
            - type: container
              paths:
                - "/var/log/containers/*-${data.kubernetes.container.id}.log"
              fields:
                installation: ${INSTALLATION_NAME}
              containers.ids:
                - "${data.kubernetes.container.id}"
              multiline.pattern: '^\{'
              multiline.negate: true
              multiline.match: after
              multiline.timeout: 120s #default 5s
              multiline.max_lines: 10000 #default 500
              processors:
                - decode_json_fields:
                    fields: message
                    max_depth: 9
                    target: ""
                    overwrite_keys: true
                    add_error_key: true

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 28, 2023, 4:17pm UTC](https://discuss.elastic.co/t/filebeat-not-collecting-all-logs/326694/2 "2023-03-28T16:17:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.