# Filebeat not reading outputs from YAML

**URL:** <https://discuss.elastic.co/t/filebeat-not-reading-outputs-from-yaml/60284>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 12, 2016, 11:53am UTC](https://discuss.elastic.co/t/filebeat-not-reading-outputs-from-yaml/60284 "2016-09-12T11:53:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paul\_D\_Ambra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paul_d_ambra/32/10728_2.png) [@Paul\_D\_Ambra](https://discuss.elastic.co/u/Paul_D_Ambra)\
**Post date:** [September 12, 2016, 11:53am UTC](https://discuss.elastic.co/t/filebeat-not-reading-outputs-from-yaml/60284/1 "2016-09-12T11:53:55Z")

</div>

I'm sure this will be a problem in my yaml but I can't see what it is.

I'm trying to run filebeat 1.3.0 on windows server 2012/

my config is in a file in the same directory as filebeat.exe called filebeat.yml

```auto
---
filebeat:
  prospectors:
    -
      paths:
        - "C:\\inetpub\\logs\\LogFiles\\*.log"
      input_type: iis
      document_type: iis
      exclude_lines: ["^#"]
      fields:
        application: application_name
        environment: production
      fields_under_root: true
  output:
    logstash:
      hosts: ["logstash.url:5044"]

```

when I run `filebeat.exe -c filebeat.yml -e -v -d "*"`

the output is

```auto
C:\filebeat-1.3.0-windows>filebeat.exe -c filebeat.yml -e -v -d "*"
2016/09/12 11:53:00.843627 beat.go:156: DBG Initializing output plugins
2016/09/12 11:53:00.844301 geolite.go:24: INFO GeoIP disabled: No paths were set
 under output.geoip.paths
2016/09/12 11:53:00.846301 publish.go:269: INFO No outputs are defined. Please d
efine one under the output section.
Error Initialising publisher: No outputs are defined. Please define one under th
e output section.
2016/09/12 11:53:00.856499 beat.go:161: CRIT No outputs are defined. Please defi
ne one under the output section.

```

putting a console output instead of logstash doesn't have any effect.

I've edited the yml in notepad++ and confirmed that there are no tabs

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 12, 2016, 1:20pm UTC](https://discuss.elastic.co/t/filebeat-not-reading-outputs-from-yaml/60284/2 "2016-09-12T13:20:37Z")

</div>

You've indented the `output` block so that it's below `filebeat` in the structure, but it should be directly at the root of the YAML document, alongside `filebeat`.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 3, 2016, 11:54am UTC](https://discuss.elastic.co/t/filebeat-not-reading-outputs-from-yaml/60284/3 "2016-10-03T11:54:18Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.