# Logstash don't send data to elastic, but send it to stdout

**URL:** <https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739>\
**Category:** Logstash\
**Created:** [May 23, 2016, 3:47pm UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739 "2016-05-23T15:47:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![SirEdvin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siredvin/32/9881_2.png) [@SirEdvin](https://discuss.elastic.co/u/SirEdvin)\
**Post date:** [May 23, 2016, 3:47pm UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739/1 "2016-05-23T15:47:59Z")

</div>

Hello,

I have some problem with logstash configuration. Here is my logstash configuration

```auto
input {
    beats {
        port => 5044
    }
}

filter {
           
}

output {
    elasticsearch {
        hosts => ["localhost"]
        sniffing => true
        manage_template => false
        index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
        document_type => "%{[@metadata][type]}"
    }
    stdout { codec => rubydebug }
}

```

So, I try to send some logs to logstash and i receive it in stdout.

```auto
{
       "message" => "[I 160523 16:31:45 web:1946] 200 GET /rest/v1/ru/advert/list?last_adv_uuid=00000000-0000-0000-0000-055984a23ea3 (192.168.200.10) 63.18ms",
      "@version" => "1",
    "@timestamp" => "2016-05-23T16:31:45.449Z",
         "count" => 1,
          "beat" => {
        "hostname" => "e3da30034825",
            "name" => "e3da30034825"
    },
        "source" => "/aiwona/service/var/logs/aiwona.log",
        "offset" => 1018227,
          "type" => "api-logs",
    "input_type" => "log",
        "fields" => nil,
          "host" => "e3da30034825",
          "tags" => [
        [0] "beats_input_codec_plain_applied"
    ]

```

And in ES too.

But, after 5 minutes, ES stop to accept my logs, instead of stdout.

Can anybody help me?

Thank you for reading 🙂

ES configuration is default.

---

<div class="post-metadata">

**Author:** ![xdzhou](https://avatars.discourse-cdn.com/v4/letter/x/9de053/32.png) [@xdzhou](https://discuss.elastic.co/u/xdzhou)\
**Post date:** [May 24, 2016, 6:29am UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739/2 "2016-05-24T06:29:04Z")

</div>

So you have some data in ES in the first 5 minutes, and after that you still have data in stdout, but not ES?

If that is the case, check if your data simply have the same id and overwrite previous ones. At least in your configuration, there is no document\_id specified.

---

<div class="post-metadata">

**Author:** ![SirEdvin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siredvin/32/9881_2.png) [@SirEdvin](https://discuss.elastic.co/u/SirEdvin)\
**Post date:** [May 24, 2016, 9:59am UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739/3 "2016-05-24T09:59:58Z")

</div>

Well, please close the topic, it just my local problem (\_search return only 10 records ☹ )

---

<div class="post-metadata">

**Author:** ![SirEdvin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siredvin/32/9881_2.png) [@SirEdvin](https://discuss.elastic.co/u/SirEdvin)\
**Post date:** [May 24, 2016, 10:00am UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739/4 "2016-05-24T10:00:33Z")

</div>

Thanks you for answering, but I already fix this problem with disable replication and enable brain 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:56am UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739/5 "2017-07-06T04:56:28Z")

</div>