# Filebeat not working

**URL:** <https://discuss.elastic.co/t/filebeat-not-working/291337>\
**Category:** Kibana\
**Created:** [December 9, 2021, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337 "2021-12-09T14:41:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shubham\_Singh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_singh/32/96820_2.png) [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Post date:** [December 9, 2021, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337/1 "2021-12-09T14:41:19Z")

</div>

Filebeat is not logging logs from a path. Here is my filebeat config -

filebeat.inputs:

- type: log  
enabled: true  
paths:
  - /var/log/xyz/\*/ \*.log  
input\_type: log  
json.keys\_under\_root: true  
json.add\_error\_key: true  
json.message\_key: message  
reload.enabled: false  
setup.template.settings:  
index.number\_of\_shards: 1  
index.codec: best\_compression

Inside /var/log/xyz directory i have 2 folders which has the log files. For one directory logs are coming in to kibana but for other one it is not working.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [December 10, 2021, 6:51pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337/2 "2021-12-10T18:51:51Z")

</div>

> [@Shubham\_Singh](#):
>
> /var/log/xyz/\*/ \*.log

Not sure if that is a typo but there is a space in that path right before the `*.log`

---

<div class="post-metadata">

**Author:** ![Shubham\_Singh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_singh/32/96820_2.png) [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Post date:** [December 11, 2021, 4:25pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337/3 "2021-12-11T16:25:19Z")

</div>

It's a typo but the path is correctly defined. We started receiving the logs for other apps, just we are not receiving logs for one app. earlier we were receiving the logs from the app but when new index got created the logs are not coming in.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 8, 2022, 4:25pm UTC](https://discuss.elastic.co/t/filebeat-not-working/291337/4 "2022-01-08T16:25:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.