# Log Forwarding not working from any clients

**URL:** <https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 23, 2018, 11:58am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001 "2018-11-23T11:58:58Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [November 23, 2018, 11:58am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/1 "2018-11-23T11:58:59Z")

</div>

Hi All,

I'm facing some weird situation. Recently, I installed ELK on Redhat which was successful. Now, I installed filebeat on client machine (Redhat) and log forwarding was happening, then went further and installed filebeat on second client machine (Suse) and that happened successful too. But after a day, I realized that log forwarding was not happening from redhat machine, Somehow I solved that case, but log forwarding has stopped from second machine Suse.

Right now, the situation is like log forwarding is happening only from one machine.

Apart, from that in output of curl -XGET '[http://localhost:9200/filebeat-\*/\_search?pretty](http://localhost:9200/filebeat-*/_search?pretty)' , there is only one client/hostname getting displayed.

Please help me !!!

Thank You

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [November 26, 2018, 9:02am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/2 "2018-11-26T09:02:22Z")

</div>

Could you check if the UUID in the `meta.json` file is the same?

---

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [November 26, 2018, 10:09am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/3 "2018-11-26T10:09:44Z")

</div>

Sorry, but can you please let me know how . I'm unaware

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [November 26, 2018, 10:19am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/4 "2018-11-26T10:19:38Z")

</div>

It is located under `/var/lib/filebeat`.

---

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [November 26, 2018, 6:22pm UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/5 "2018-11-26T18:22:11Z")

</div>

Hi Noemi,

Contents of meta.json is different for both filebeat client machines.

---

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [November 27, 2018, 2:28pm UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/6 "2018-11-27T14:28:52Z")

</div>

Hi Noemi,

Issue is bit different. Actually, log forwarding is not happening from any server. As soon as I delete and recreate /var/lib/filebeat/registry file on client machine, logs forwarding would start for some seconds and stops after that. Tried multiple times, but log forwarding is not happening from any machine.

---

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [November 29, 2018, 7:27am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/7 "2018-11-29T07:27:38Z")

</div>

Issue resolved. It was my bad:

> [@Unable to send or receive log details](https://discuss.elastic.co/t/unable-to-send-or-receive-log-details/157381/17):
>
> Hi Pier, There was mistake in configuration. It is been resolved now. Logs forwarding is frequently happening. Thanks for your valuable time and help. There were two files available in my logstash conf directory, which were conflicting.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 27, 2018, 7:27am UTC](https://discuss.elastic.co/t/log-forwarding-not-working-from-any-clients/158001/8 "2018-12-27T07:27:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
