# Logs Coming Through Logstash, but Don't Appear in Kibana

**URL:** https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963
**Category:** Elasticsearch
**Created:** [November 18, 2015, 3:44pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963 "2015-11-18T15:44:14Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 3:44pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/1 "2015-11-18T15:44:15Z")

</div>

Logs are coming through logstash just fine. There are no errors in the logstash log or the elasticsearch logs/indexing logs. I have restarted elasticsearch, logstash, and kibana, but the latest log shows 30 minutes old and I can't figure out why.

---

<div class="post-metadata">

### Author: ![SuperPringles](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/superpringles/32/5303_2.png) [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)
#### Post date: [November 18, 2015, 4:05pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/2 "2015-11-18T16:05:32Z")

</div>

You said that the latest log is 30 min ago (51 by now) but what is the latest one in Logstash? Maybe it just doesn't have any new logs?

---

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 4:06pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/3 "2015-11-18T16:06:24Z")

</div>

Oh they're coming through alright. As I'm tailing the logstash.stdout file, they are just flying through my screen.

---

<div class="post-metadata">

### Author: ![SuperPringles](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/superpringles/32/5303_2.png) [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)
#### Post date: [November 18, 2015, 4:07pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/4 "2015-11-18T16:07:38Z")

</div>

Just trying out every small mistakes. The output conf of Logstash, does it point to the right host and port for elasticsearch?

---

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 4:09pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/5 "2015-11-18T16:09:39Z")

</div>

Yes. Nothing in my configs have changed. It just all the sudden stopped showing logs in the kibana dashboard.

---

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 4:11pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/6 "2015-11-18T16:11:21Z")

</div>

Here are the indices stats from elasticsearch. I'm not 100% sure what "yellow" means.  
`curl localhost:9200/_cat/indices yellow open logstash-2015.11.10 5 1 53238 0 14mb 14mb yellow open logstash-2015.11.14 5 1 463339 0 126.9mb 126.9mb yellow open logstash-2015.11.19 5 1 52235 0 15.6mb 15.6mb yellow open logstash-2015.11.15 5 1 462944 0 126.8mb 126.8mb yellow open logstash-2015.11.11 5 1 448247 0 111.8mb 111.8mb yellow open logstash-2015.11.16 5 1 467115 0 128.8mb 128.8mb yellow open logstash-2015.11.12 5 1 601605 0 162.4mb 162.4mb yellow open logstash-2015.11.17 5 1 562858 0 157.1mb 157.1mb yellow open logstash-2015.11.13 5 1 463421 0 128mb 128mb yellow open .kibana 1 1 2 1 11.5kb 11.5kb yellow open logstash-2015.11.18 5 1 199574 0 120.8mb 120.8mb`

---

<div class="post-metadata">

### Author: ![SuperPringles](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/superpringles/32/5303_2.png) [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)
#### Post date: [November 18, 2015, 4:14pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/7 "2015-11-18T16:14:50Z")

</div>

Indices are provided with a health status. This is something ELK provides on its own. Green, yellow, red and grey if I remember correctly. Also if I look at your indices I notice how there is a logstash-2015.11.19 among them.  
For me at least it isn't the 19th yet but might be mistaken about that.

Regarding the logs not outputting, Maybe its an idea to check why the indices are yellow. Might not prove to be anything useful for your situation but you never know.

---

<div class="post-metadata">

### Author: ![SuperPringles](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/superpringles/32/5303_2.png) [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)
#### Post date: [November 18, 2015, 4:15pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/8 "2015-11-18T16:15:54Z")

</div>

Ah it would seem that I was mistaken. There are actually countries now who are on the 19th.

---

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 4:16pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/9 "2015-11-18T16:16:28Z")

</div>

The date on the server was incorrect. That's why theres a logstash-2015.11.19. I've since corrected the date.

---

<div class="post-metadata">

### Author: ![tyosick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tyosick/32/5814_2.png) [@tyosick](https://discuss.elastic.co/u/tyosick)
#### Post date: [November 18, 2015, 4:18pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/10 "2015-11-18T16:18:00Z")

</div>

I just rebooted the server and now things are coming through kibana again. I have no idea what happened, but it seems to be fixed.

---

<div class="post-metadata">

### Author: ![SuperPringles](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/superpringles/32/5303_2.png) [@SuperPringles](https://discuss.elastic.co/u/SuperPringles)
#### Post date: [November 19, 2015, 8:19am UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/11 "2015-11-19T08:19:38Z")

</div>

Surprisingly that was my next suggestion. Seems like the old "Did you turn it off and on again" never fails.

Weird how it didn't work at first.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:37pm UTC](https://discuss.elastic.co/t/logs-coming-through-logstash-but-dont-appear-in-kibana/34963/12 "2017-07-05T23:37:22Z")

</div>


