# Filebeat not sending all the logs to the output file

**URL:** <https://discuss.elastic.co/t/filebeat-not-sending-all-the-logs-to-the-output-file/377468>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 23, 2025, 11:16pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-all-the-logs-to-the-output-file/377468 "2025-04-23T23:16:46Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![MelasticSan](https://avatars.discourse-cdn.com/v4/letter/m/8e8cbc/32.png) [@MelasticSan](https://discuss.elastic.co/u/MelasticSan)\
**Post date:** [April 23, 2025, 11:16pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-all-the-logs-to-the-output-file/377468/1 "2025-04-23T23:16:46Z")

</div>

There are a couple of files in /opt/logs/\*.0 and the file beat reads them properly but does not print all the lines and sends them to the output file . Is there a problem with my matching ? How can I make sure everything from 2 files stdout.0 and stderr.0 from /opt/logs/ is read and sent to the /apps/logs/abcd/web\_xxx.log ?

```auto
filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /opt/logs/*.0
  json.keys_under_root: true
  json.add_error_key: false
  json.ignore_decoding_error: true
  json.overwrite_keys: true
  json.message_key: message
  json.message_key: msg
  multiline:
        pattern: '^[[:digit:]]{4}-[[:digit:]]{2}-[[:digit:]]{2}'
        negate: true
        match: after
fields:
  loggingApplicationId: abcd
processors:
- drop_fields:
    fields: ["beat", "offset", "type"]

output.file:
   path: "/apps/logs/abcd"
   filename: web_xxx.log
   rotate_every_kb: 1000000
   permissions: 0644
   codec.json:
     escape_html: false
logging.level: error
logging.metrics.enabled: false
logging.to_stderr: true
logging.json: true

```