# Filebeat on RHEL not sending to Logstash from all managed servers

**URL:** https://discuss.elastic.co/t/filebeat-on-rhel-not-sending-to-logstash-from-all-managed-servers/289952
**Category:** Beats
**Tags:** filebeat
**Created:** [November 23, 2021, 1:36pm UTC](https://discuss.elastic.co/t/filebeat-on-rhel-not-sending-to-logstash-from-all-managed-servers/289952 "2021-11-23T13:36:29Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![MKirby](https://avatars.discourse-cdn.com/v4/letter/m/e56c9b/32.png) [@MKirby](https://discuss.elastic.co/u/MKirby)
#### Post date: [November 23, 2021, 1:36pm UTC](https://discuss.elastic.co/t/filebeat-on-rhel-not-sending-to-logstash-from-all-managed-servers/289952/1 "2021-11-23T13:36:30Z")

</div>

Good Morning;

I have an odd situation with regards to my Filebeat installation. I have it installed on all of my RHEL v.8, and out of the 5 I have it installed on, only 2 are sending the information to logstash, where I can read it in Kibana. The two that are sending viewable Filebeat log information are the Logstash and Kibana servers, I have 2 zabbix servers and the Elasticsearch servers that are not sending viewable information. I have configured everything in the same way throughout my environment. I check the /var/log/messages on Elasticsearch and Kibana and I do see Filebeat listed in both. I also see:

` error determining if connected Elasticsearch node is master` in the Elasticsearch server in the messages log.

I only have 1 Elasticsearch server with 100's of terrabytes of space. I just don't understand why I would get it from 2 systems and not the 3 others as they are configured identically.

Please help, it is appreciated.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 21, 2021, 3:36pm UTC](https://discuss.elastic.co/t/filebeat-on-rhel-not-sending-to-logstash-from-all-managed-servers/289952/2 "2021-12-21T15:36:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
