# Filebeat not sending to logstash

**URL:** <https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 16, 2016, 6:04pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743 "2016-09-16T18:04:57Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![overip](https://avatars.discourse-cdn.com/v4/letter/o/cdc98d/32.png) [@overip](https://discuss.elastic.co/u/overip)\
**Post date:** [September 16, 2016, 6:04pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743/1 "2016-09-16T18:04:57Z")

</div>

Hello everybody. I am a total newbie. I am having problem sending logs to Logstash from Filebeat. Actually I don't see anything coming out the port 5044 with sudo tcpdump port 5044 and '(tcp-syn|tcp-ack)!=0'

Here is the content of filebeat.yml  
Even though my final goal is to set up a TLS connection, at the moment I am just trying to see if I can establish a connection. If you feel like giving me a hint on the TLS part, would be greatly appreciated!

Thank you so much everybody.

Andrea

```auto
################### Filebeat Configuration Example #########################

############################# Filebeat ######################################
filebeat:
  # List of prospectors to fetch data.
  prospectors:
    # Each - is a prospector. Below are the prospector specific configurations
    -
      paths:
        - /var/log/*.log
     
      input_type: log

     
  registry_file: /var/lib/filebeat/registry

output:

  ### Logstash as output
  logstash:    
# The Logstash hosts
    hosts: ["xxx.xxx.xxx.xxx:5044"] 
logging:
  files:

```

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [September 16, 2016, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743/2 "2016-09-16T18:28:43Z")

</div>

Try running with debug logging turned on. See [Filebeat Reference » Troubleshooting » Debugging](https://www.elastic.co/guide/en/beats/filebeat/current/enable-filebeat-debugging.html)

---

<div class="post-metadata">

**Author:** ![overip](https://avatars.discourse-cdn.com/v4/letter/o/cdc98d/32.png) [@overip](https://discuss.elastic.co/u/overip)\
**Post date:** [September 16, 2016, 8:06pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743/3 "2016-09-16T20:06:10Z")

</div>

I am having some problems understanding the output..

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [September 19, 2016, 7:33am UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743/4 "2016-09-19T07:33:06Z")

</div>

@overip Please share the log output so we can help you understanding it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 7, 2016, 6:05pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-to-logstash/60743/5 "2016-10-07T18:05:02Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.