# How to check Filebeat is running properly

**URL:** <https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 11, 2019, 7:08am UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024 "2019-09-11T07:08:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [September 11, 2019, 7:08am UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024/1 "2019-09-11T07:08:48Z")

</div>

Hi I notice that after I ran the service for logstash the run time will restart some times after a few second. And there are no logs recorded on the /var/log/logstash.

If is properly running, will it produce log files as "logstash-plain-2019..." ?

Please advice.

---

<div class="post-metadata">

**Author:** ![Michal\_Pristas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michal_pristas/32/46639_2.png) [@Michal\_Pristas](https://discuss.elastic.co/u/Michal_Pristas)\
**Post date:** [September 11, 2019, 12:05pm UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024/2 "2019-09-11T12:05:57Z")

</div>

I'm a bit confused.  
are you using filebeat to monitor log stash logs or you're missing logstash logs produced by log stash?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [September 12, 2019, 1:52am UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024/3 "2019-09-12T01:52:19Z")

</div>

Hi @Michal_Pristas, yes I am trying to use filebeat to work as a bridge between 2 servers and passing the logs to logstash and it will output to ES. Is this correct?

---

<div class="post-metadata">

**Author:** ![kumarabhi](https://avatars.discourse-cdn.com/v4/letter/k/6a8cbe/32.png) [@kumarabhi](https://discuss.elastic.co/u/kumarabhi)\
**Post date:** [September 13, 2019, 9:22pm UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024/4 "2019-09-13T21:22:22Z")

</div>

#Test the config  
/usr/share/logstash/bin/logstash --config.test\_and\_exit -f /etc/logstash/conf.d/logstash.conf

#Run logstash  
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 11, 2019, 9:22pm UTC](https://discuss.elastic.co/t/how-to-check-filebeat-is-running-properly/199024/5 "2019-10-11T21:22:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.