# Kibana only shows log on filebeat or logstash restart
**URL:** https://discuss.elastic.co/t/kibana-only-shows-log-on-filebeat-or-logstash-restart/229993
**Category:** Beats
**Tags:** filebeat
**Created:** [April 27, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-only-shows-log-on-filebeat-or-logstash-restart/229993 "2020-04-27T17:01:08Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@gia.g](https://discuss.elastic.co/u/gia.g)
#### Post date: [April 27, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-only-shows-log-on-filebeat-or-logstash-restart/229993/1 "2020-04-27T17:01:08Z")
Goodmorning,
i tried to search for this type of problem for few days but i didn't find anything.
The infrastructure is like this 🙂
- 1 server with Wazuh-manager and Filebeat installed
- 1 server with Logstash, Elasticsearch and Kibana installed
What happens it's strange :
- everything is UP & running but i can't see no logs on Kibana
- first restart logstash or filebeat at 10.00 am
- all UP & running again
- second restart logstash or filebeat at 10.30 am
- on kibana it's possible to see only one log line concurrently with the first restart and then nothing again.
I tried to debug filebeat and it seems that all the log is passed to Logstash.
Filebeat configuration :
filebeat.inputs:
- type: log
paths:
- '/var/ossec/logs/alerts/alerts.json'
- '/var/ossec/logs/archives/archives.json'
setup.template.json.enabled: true
setup.template.json.path: '/etc/filebeat/wazuh-template.json'
setup.template.json.name: 'wazuh'
setup.template.overwrite: true
setup.ilm.enabled: false
output.logstash:
hosts: ["elasticserver:5000"]
protocol: https
ssl.certificate: "/etc/filebeat/certs/cert.crt"
ssl.key: "/etc/filebeat/certs/cert.key"
ssl.certificate\_authorities: ["/etc/filebeat/certs/ca/ca.crt"]
username:
password:
logging.level: info
logging.to\_files: true
logging.files:
path: /var/log/filebeat
name: filebeat
keepfiles: 30
permissions: 0600
I'm getting crazy about this, could you please help me to understand ?
Thank you so much
---
### Author:  [@gia.g](https://discuss.elastic.co/u/gia.g)
#### Post date: [May 5, 2020, 7:19am UTC](https://discuss.elastic.co/t/kibana-only-shows-log-on-filebeat-or-logstash-restart/229993/2 "2020-05-05T07:19:38Z")
Hi, any suggestions please ?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 2, 2020, 7:19am UTC](https://discuss.elastic.co/t/kibana-only-shows-log-on-filebeat-or-logstash-restart/229993/3 "2020-06-02T07:19:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.