# I have a test server and i have a central server. I need to load the syslog data from test server to central server. Configured elasticsearch,logstash,kibana in central server,configured filebeat in test server,but why data is not loading into kibana

**URL:** <https://discuss.elastic.co/t/i-have-a-test-server-and-i-have-a-central-server-i-need-to-load-the-syslog-data-from-test-server-to-central-server-configured-elasticsearch-logstash-kibana-in-central-server-configured-filebeat-in-test-server-but-why-data-is-not-loading-into-kibana/376674>\
**Category:** Elastic Search\
**Created:** [April 2, 2025, 9:11am UTC](https://discuss.elastic.co/t/i-have-a-test-server-and-i-have-a-central-server-i-need-to-load-the-syslog-data-from-test-server-to-central-server-configured-elasticsearch-logstash-kibana-in-central-server-configured-filebeat-in-test-server-but-why-data-is-not-loading-into-kibana/376674 "2025-04-02T09:11:28Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Monalisa](https://avatars.discourse-cdn.com/v4/letter/m/4bbf92/32.png) [@Monalisa](https://discuss.elastic.co/u/Monalisa)\
**Post date:** [April 2, 2025, 9:11am UTC](https://discuss.elastic.co/t/i-have-a-test-server-and-i-have-a-central-server-i-need-to-load-the-syslog-data-from-test-server-to-central-server-configured-elasticsearch-logstash-kibana-in-central-server-configured-filebeat-in-test-server-but-why-data-is-not-loading-into-kibana/376674/1 "2025-04-02T09:11:28Z")

</div>

I have a test server and i have a central server. I need to load the syslog data from test server to central server. Configured elasticsearch,logstash,kibana in central server,configured filebeat in test server,but why data is not loading into kibana.  
This is my logstash conf file  
input {  
tcp {  
host =\> "139.84.144.118"  
port =\> 5044 # Default syslog port for UDP  
type =\> "ad\_audit.log"  
}

# or for TCP:

tcp {  
port =\> 5044 # Default syslog port for TCP  
type =\> "syslog"  
}  
}  
filter {  
grok {  
match =\> { "message" =\> "%{SYSLOGTIMESTAMP} %{SYSLOGHOST} %{WORD:syslog\_program}[%{POSINT:syslog\_pid}]: %{GREEDYDATA:syslog\_message}" }  
}  
}

output {  
elasticsearch {  
hosts =\> ["[http://149.28.242.54:9200](http://149.28.242.54:9200)"]  
index =\> "syslog-%{+YYYY.MM.dd}"  
}  
}