# How to see if a particular service is logging on a daily basis? **URL:** \ **Category:** Elasticsearch\ **Created:** [March 16, 2016, 5:05pm UTC](https://discuss.elastic.co/t/how-to-see-if-a-particular-service-is-logging-on-a-daily-basis/44596 "2016-03-16T17:05:51Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Michael1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael1/32/29279_2.png) [@Michael1](https://discuss.elastic.co/u/Michael1)\ **Post date:** [March 16, 2016, 5:05pm UTC](https://discuss.elastic.co/t/how-to-see-if-a-particular-service-is-logging-on-a-daily-basis/44596/1 "2016-03-16T17:05:51Z")
Hello All, I would like a way to check to see if a group of particular servers are forwarding log data into ElasticSearch on a daily basis. The current issue is, I am using the nxlog log forwarder to send logs into ElasticSearch on several PaaS instances on Microsoft Azure. However, this has not been going well. If any network issues occur on the Microsoft side, often nxlog is experiencing a loss of connectivity to Logstash, which therefore results in a complete halt of logging on the PaaS instances that experienced the issue. Since these are production PaaS instances, we cannot just reboot them during the day, and it is not simple to RDP into them because they are PaaS, not IaaS. We have been racking our brains trying to come up with a way to know when this happens. One person suggested that we utilize the ReST API for ElasticSearch to see if logs are in ElasticSearch on a daily basis for all of these PaaS instances. I have no idea what kind of query this would be and if it is even possible. So, I am reaching out to you folks for any assistance you could provide. Thank you for your time, Michael ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [March 19, 2016, 2:49pm UTC](https://discuss.elastic.co/t/how-to-see-if-a-particular-service-is-logging-on-a-daily-basis/44596/2 "2016-03-19T14:49:44Z")
Well, you could e.g. make a simple terms aggregation query on whatever field that contains the hostname of each server. Subtract the resulting list of hostnames from the complete list of hosts, and any remaining hosts haven't logged anything during that time period. If you can get NXLog to ping a separate tool for heartbeat monitoring (e.g. Lovebeat or Riemann) for each message from each host that would be another option. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:06pm UTC](https://discuss.elastic.co/t/how-to-see-if-a-particular-service-is-logging-on-a-daily-basis/44596/3 "2017-07-05T23:06:55Z")