# Gelf output to Logstash not working

**URL:** <https://discuss.elastic.co/t/gelf-output-to-logstash-not-working/242061>\
**Category:** Logstash\
**Created:** [July 21, 2020, 3:44pm UTC](https://discuss.elastic.co/t/gelf-output-to-logstash-not-working/242061 "2020-07-21T15:44:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pointonj](https://avatars.discourse-cdn.com/v4/letter/p/e95f7d/32.png) [@pointonj](https://discuss.elastic.co/u/pointonj)\
**Post date:** [July 21, 2020, 3:44pm UTC](https://discuss.elastic.co/t/gelf-output-to-logstash-not-working/242061/1 "2020-07-21T15:44:58Z")

</div>

Hi,

I'm trying to get the logs from my Graylog server into 3 Logstash Servers that are load balanced. I'm not sure if this is an issue with Graylog or Logstash but as i've posted this on the Graylog community and got no response i thought i would put it here and see what response i get.

The Issue is my Graylog server cant connect to the Loadbalancer and i'm no sure which side the miss-configuration is.

My loadbalancer is set to send everything it receives on port 5606 to the logstash servers on port 5606

This is the error i get on my Graylog server  
`ERROR [GelfTcpTransport] Connection failed: connection timed out: /LoadBalancerIP:5606`

This is my Logstash config -

```auto
input {
  gelf {
    use_tcp => true
    port => 5606
  }
}

output {
     kafka {
        bootstrap_servers => "kafkaIP:9092"
        topic_id => "AIALOGS"
     }
}

```

Logstash start up correctly as i get the start up logs you need.

```auto
[INFO] 2020-07-21 15:34:53.977 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.i d"=>"main"}
[INFO] 2020-07-21 15:34:54.054 [Ruby-0-Thread-8: :1] gelf - Starting gelf listener (tcp) ... {:addres s=>"0.0.0.0:5606"}
[INFO] 2020-07-21 15:34:54.060 [Ruby-0-Thread-9: :1] gelf - Starting gelf listener (udp) ... {:addres s=>"0.0.0.0:5606"}
[INFO] 2020-07-21 15:34:54.095 [Agent thread] agent - Pipelines running {:count=>1, :running_pipeline s=>[:main], :non_running_pipelines=>[]}
[INFO] 2020-07-21 15:34:54.497 [Api Webserver] agent - Successfully started Logstash API endpoint {:p ort=>9600}

```

This is what leads me to believe its an issue with Graylog but i thought i would ask here to see if anyone could help?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 18, 2020, 3:44pm UTC](https://discuss.elastic.co/t/gelf-output-to-logstash-not-working/242061/2 "2020-08-18T15:44:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.