# Logstash management info wrong?

**URL:** <https://discuss.elastic.co/t/logstash-management-info-wrong/134836>\
**Category:** Logstash\
**Created:** [June 6, 2018, 3:17pm UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836 "2018-06-06T15:17:27Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![pkaramol](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pkaramol/32/22610_2.png) [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Post date:** [June 6, 2018, 3:17pm UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/1 "2018-06-06T15:17:27Z")

</div>

In our `kibana` UI the following is displayed when going to `Management` -\> `Logstash` -\> `Pipelines`

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1a564972e9b9e1f74c19dd814276da6305b44a75.png)

However, when tailing:

```auto
sudo tail -f /var/log/logstash/logstash-plain.log

```

`[2018-06-06T15:46:44,686][INFO][logstash.agent] Pipelines running {:count=>8, :pipelines=>[".monitoring-logstash", "main", "p_mapping_channels", "p_mapping_fqdnvh", "p_mapping_hosts", "p_mapping_sldomain", "p_mapping_user_agents", "p_mapping_users"]}`

And in practice we **do** see the pipelines running and producing the events.

Any idea why?

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [June 7, 2018, 5:20am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/2 "2018-06-07T05:20:50Z")

</div>

Did you configure Logstash to send X-Pack monitoring information to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![pkaramol](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pkaramol/32/22610_2.png) [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Post date:** [June 7, 2018, 7:10am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/3 "2018-06-07T07:10:20Z")

</div>

Αs long as I had 1 (main) pipeline, kibana UI indicated that there was 1 pipeline running;

as soon as I started using multiple pipelines, it started showing 0 pipelines as screenshoted above;

---

<div class="post-metadata">

**Author:** ![pkaramol](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pkaramol/32/22610_2.png) [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Post date:** [June 7, 2018, 7:11am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/4 "2018-06-07T07:11:49Z")

</div>

Αnd here is the most weird part ...

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bdf9ed01b0f84754c3913aeb3d39bbb01568de33.png)

---

<div class="post-metadata">

**Author:** ![pkaramol](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pkaramol/32/22610_2.png) [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Post date:** [June 7, 2018, 7:15am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/5 "2018-06-07T07:15:27Z")

</div>

So when going

`Management` --\> ( **Logstash** )/`Pipelines`

I get

> No Pipelines Found

(first screenshot)

When navigating via

`Monitoring` --\> ( **Logstash** )/`Pipelines`

I get the appropriate pipeline listing (second screenshot)

**?**

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [June 7, 2018, 7:25am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/6 "2018-06-07T07:25:11Z")

</div>

I missed the `management` part in your original post.

Those are two different things. Management -\> Pipelines is for when you use Elasticsearch as a central repository for Logstash configs. You need X-Pack Gold for this. This has nothing to do with Monitoring.

---

<div class="post-metadata">

**Author:** ![pkaramol](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pkaramol/32/22610_2.png) [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Post date:** [June 7, 2018, 7:27am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/7 "2018-06-07T07:27:55Z")

</div>

Thx.

So `Management` -\> `Pipelines` will display the pipelines that were configured **via** elasticsearch ? (if I understand correctly the following sentence)

> Management -\> Pipelines is for when you use Elasticsearch as a central repository for Logstash configs

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [June 7, 2018, 7:38am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/8 "2018-06-07T07:38:52Z")

</div>

[https://www.elastic.co/guide/en/logstash/current/logstash-centralized-pipeline-management.html](https://www.elastic.co/guide/en/logstash/current/logstash-centralized-pipeline-management.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2018, 7:39am UTC](https://discuss.elastic.co/t/logstash-management-info-wrong/134836/9 "2018-07-05T07:39:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.