# FileBeat Not Shipping changes as expected to Logstash

**URL:** <https://discuss.elastic.co/t/filebeat-not-shipping-changes-as-expected-to-logstash/135226>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 9, 2018, 11:36am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-changes-as-expected-to-logstash/135226 "2018-06-09T11:36:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![raghu\_ram](https://avatars.discourse-cdn.com/v4/letter/r/7cd45c/32.png) [@raghu\_ram](https://discuss.elastic.co/u/raghu_ram)\
**Post date:** [June 9, 2018, 11:36am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-changes-as-expected-to-logstash/135226/1 "2018-06-09T11:36:35Z")

</div>

I have an original html file  
first it shipped using file beat and log stash file opened successfully with all content

Changed existing lines in html file , file beat detected those changes and shipped to log stash  
observed that file opened successfully but with not expected content  
observed in logstash server logs that incorrect data was shipped from file beats

Refer attached screen shots  
initial html without new element ![initialhtml](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3fe37fb2c99871ee3b0f119e1377c2794664578a.PNG)  
 ![original](https://us1.discourse-cdn.com/elastic/original/3X/2/3/23221128ae199daff8d5d4334fde0fead0780969.PNG) ![logstash](https://us1.discourse-cdn.com/elastic/original/3X/2/c/2c464b92098992eb777d9ae0309dc691881fbb9e.PNG) ![logstashmessage](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7a5925e174c2423744fdcc79fad3e16a39cc5fb5.PNG)

Following is my filebeat prospectors and log stash conf  
filebeat.prospectors:  
type: log  
paths:  
directory/\*.html  
output.logstash:  
hosts: ["ipaddress"]  
input {  
beats {  
port =\> 5048  
}  
}  
output {  
stdout { codec =\> rubydebug }  
file  
{  
codec =\> line {  
format =\> "%{[message]}"  
}  
path =\> "C:/Program Files/logstash-6.2.3/testPractice/LogsCollected/DebugLog09May2018/OneTwo.html}  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 7, 2018, 11:36am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-changes-as-expected-to-logstash/135226/2 "2018-07-07T11:36:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.