# Filebeat problem

**URL:** <https://discuss.elastic.co/t/filebeat-problem/325831>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 17, 2023, 10:56am UTC](https://discuss.elastic.co/t/filebeat-problem/325831 "2023-02-17T10:56:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Elie\_Sbat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elie_sbat/32/69089_2.png) [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Post date:** [February 17, 2023, 10:56am UTC](https://discuss.elastic.co/t/filebeat-problem/325831/1 "2023-02-17T10:56:46Z")

</div>

Hello,

I am using filebeat v8 that sends data to kafka. On startup, filebeat sends a chunk of data and then NO data is being transferred. I checked filebeat logs no errors are present. Filebeat registry is accessible and the counter is incrementing.

Filebeat.yml config:

```auto
filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.

# filestream is an input for collecting log messages from files.
- type: filestream

  # Change to true to enable this input configuration.
  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - C:\Bluecoat-logs\*.log
    #- c:\programdata\elasticsearch\logs\*
  # Exclude lines. A list of regular expressions to match. It drops the lines that are
  # matching any regular expression from the list.
  #exclude_lines: ['^DBG']

  # Include lines. A list of regular expressions to match. It exports the lines that are
  # matching any regular expression from the list.
  #include_lines: ['^ERR', '^WARN']

  # Exclude files. A list of regular expressions to match. Filebeat drops the files that
  # are matching any regular expression from the list. By default, no files are dropped.
  #prospector.scanner.exclude_files: ['.gz$']

  # Optional additional fields. These fields can be freely picked
  # to add additional information to the crawled log files for filtering
  #fields:
  # level: debug
  # review: 1

output.kafka:
    hosts: ["X.X.X.X:49145"]
    topic: "proxy"

Any advice ? 

Thanks,
```

---

<div class="post-metadata">

**Author:** ![Elie\_Sbat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elie_sbat/32/69089_2.png) [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Post date:** [March 1, 2023, 9:38am UTC](https://discuss.elastic.co/t/filebeat-problem/325831/2 "2023-03-01T09:38:36Z")

</div>

Any advise on why filebeat is sending data only on startup ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2023, 11:38am UTC](https://discuss.elastic.co/t/filebeat-problem/325831/3 "2023-03-29T11:38:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.