# Logstash data not visible in Kibana

**URL:** https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880
**Category:** Elasticsearch
**Created:** [June 3, 2021, 1:53pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880 "2021-06-03T13:53:47Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Reszel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/reszel/32/81969_2.png) [@Reszel](https://discuss.elastic.co/u/Reszel)
#### Post date: [June 3, 2021, 1:53pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880/1 "2021-06-03T13:53:47Z")

</div>

Hello guys, I'm newbie to ELK and i was trying to connect Logstash to Kibana/Elastic with my own configuration. Logstash seems to be running, but Kibana can't see any data, when i try to create index pattern. Here is my logstash.conf file

> ```
> input {
> file {
> path => "/var/log/messages"
> tags => "smidz"
> }
> }
> filter {
> if "smidz" in [tags] {
> grok {
> match => { "message" => "%{SYSLOGTIMESTAMP:time} %{SYSLOGHOST:host} %{DATA:program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:message}" }
> overwrite => ["message"]
> add_field => {"index_nr" => "111111,222222"}
> }
> if "_grokparsefailure" in [tags] {
> drop{}
> }
> }
> }
> 
> output {
> if "smidz" in [tags] {
> elasticsearch{
> hosts => "localhost"
> index => "example_%{tags}"
> }
> }
> stdout{}
> }
> 
> ```

I'm using "sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash.conf" command to start Logstash, it seems to be working, however the kibana display that i don't have any data.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [June 3, 2021, 2:03pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880/2 "2021-06-03T14:03:36Z")

</div>

You do not seem to have anything adding smidz as a tag so the output filter would be ignored.

---

<div class="post-metadata">

### Author: ![Reszel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/reszel/32/81969_2.png) [@Reszel](https://discuss.elastic.co/u/Reszel)
#### Post date: [June 3, 2021, 2:05pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880/3 "2021-06-03T14:05:38Z")

</div>

Accidently edited code, here it is with previous form:  
input {  
file {  
path =\> "/var/log/messages"  
tags =\> "smidz"

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 1, 2021, 2:05pm UTC](https://discuss.elastic.co/t/logstash-data-not-visible-in-kibana/274880/4 "2021-07-01T14:05:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
