# Logstash Forwarder Error in Windows

**URL:** <https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140>\
**Category:** Logstash\
**Created:** [July 8, 2015, 11:23am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140 "2015-07-08T11:23:52Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rameeelastic](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@rameeelastic](https://discuss.elastic.co/u/rameeelastic)\
**Post date:** [July 8, 2015, 11:23am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/1 "2015-07-08T11:23:53Z")

</div>

Hi All

I am running ELK stack on windows OS , below is the versions  
ElasticSearch -- 1.6.0  
LogStash -- 1.5.2  
Kibana -- 4.1.1

I am trying to push logs from local windows laptop to ELK windows server using logstash forwarder.  
I am getting the below error

2015/07/08 16:43:29.617042 Connecting to [0.I0.17.48]:135 (0.10.17.48)  
2015/07/08 16:43:59.641515 Failed to tls handshake with 0.10.17.48 WSARecv t  
cp 1.20.9.8:49657: i/o timeout

Below is the logstash forwarder conf file entry

{  
"network": {  
"servers": ["0.I0.17.48:135"],  
"timeout": 30,  
"ssl ca": "C:\Samples\ELK\certificates\certificate.crt"  
},

# The list of files configurations

"files": [  
{  
"paths": [  
"C:/Samples/ELK/TestLogs/testiis.log"  
],  
"fields": { "type": "iis" }  
}  
]  
}

Not sure why this error is occurring . On the Server the Logstash conf is having input pointed to a file.  
Do i need to change the input to tcp ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 8, 2015, 11:26am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/2 "2015-07-08T11:26:41Z")

</div>

> [@rameeelastic](#):
>
> Failed to tls handshake

I'd check your SSL setup first, make sure everything is 100%.

---

<div class="post-metadata">

**Author:** ![rameeelastic](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@rameeelastic](https://discuss.elastic.co/u/rameeelastic)\
**Post date:** [July 16, 2015, 11:48am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/3 "2015-07-16T11:48:50Z")

</div>

That was it , I had to create a certificate with proper IP SAN details.  
Thanks

---

<div class="post-metadata">

**Author:** ![ShraddhaBandhakavi](https://avatars.discourse-cdn.com/v4/letter/s/ba9def/32.png) [@ShraddhaBandhakavi](https://discuss.elastic.co/u/ShraddhaBandhakavi)\
**Post date:** [November 26, 2015, 5:27am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/4 "2015-11-26T05:27:04Z")

</div>

hi please help me how to install logstash forwarder on windows

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 26, 2015, 8:33pm UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/5 "2015-11-26T20:33:46Z")

</div>

Please start your own thread.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:21am UTC](https://discuss.elastic.co/t/logstash-forwarder-error-in-windows/25140/6 "2017-07-06T05:21:05Z")

</div>