# Logstash doesn't do anything

**URL:** https://discuss.elastic.co/t/logstash-doesnt-do-anything/160194
**Category:** Logstash
**Created:** [December 10, 2018, 2:47pm UTC](https://discuss.elastic.co/t/logstash-doesnt-do-anything/160194 "2018-12-10T14:47:48Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![nu11ahnung](https://avatars.discourse-cdn.com/v4/letter/n/3be4f8/32.png) [@nu11ahnung](https://discuss.elastic.co/u/nu11ahnung)
#### Post date: [December 10, 2018, 2:47pm UTC](https://discuss.elastic.co/t/logstash-doesnt-do-anything/160194/1 "2018-12-10T14:47:49Z")

</div>

I am trying to configure Logstash for my network. I try to forward logs from a windows server 2012 via winlogbeat to my centos7 servers logstash instance and from there into my elasticsearch. This somehow doesn't work. I can start logstash but it's not doing anything  
This is my logstash configuration file

```
input {
      beats {
        port => 5044
      }
    }

output {
  elasticsearch {
    hosts => ["http://192.168.0.86:9200"]
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    #user => "elastic"
    #password => "changeme"
  }
}

```

and this is my winlogbeat.yml

```
winlogbeat.event_logs:
  - name: System

output.logstash:
  hosts:
    - 192.18.0.86:5044

logging.to_files: true
logging.files:
  path: C:/ProgramData/winlogbeat/Logs
logging.level: info

```

I can make a connection to my centos server from my windos server and the port is open as well. So it's no connection problem.  
I am totally new to elk and I don't really know where to start troubleshooting

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 7, 2019, 2:47pm UTC](https://discuss.elastic.co/t/logstash-doesnt-do-anything/160194/2 "2019-01-07T14:47:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
