# Logstash: No data in kibana
**URL:** https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339
**Category:** Logstash
**Created:** [March 31, 2018, 8:34pm UTC](https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339 "2018-03-31T20:34:42Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@syfy323](https://discuss.elastic.co/u/syfy323)
#### Post date: [March 31, 2018, 8:34pm UTC](https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339/1 "2018-03-31T20:34:43Z")
Hi!
I switched syslog from Graylog to ELK (same port) but I am unable to push data to ES / Kibana.
Filebeat and Packetbeat are working fine but syslog and netflow still have issues.
> [2018-03-31T22:22:38,565][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"template"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynamic\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}}}
> [2018-03-31T22:22:38,570][DEBUG][logstash.outputs.elasticsearch] Found existing Elasticsearch template. Skipping template management {:name=\>"logstash"}
> [2018-03-31T22:22:38,570][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=\>"LogStash::Outputs::Elasticsearch", :hosts=\>["[//192.168.83.20:9200](https://192.168.83.20:9200)"]}
Kibana still does not find an index for "logstash-\*".
Any ideas?
Kind regards,
Kevin
---
### Author:  [@yaauie](https://discuss.elastic.co/u/yaauie)
#### Post date: [March 31, 2018, 8:44pm UTC](https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339/2 "2018-03-31T20:44:26Z")
- What does your pipeline configuration look like? Are you using tcp, udp, or a file-based solution to send your logs to Logstash?
- Do you have evidence that messages are successfully arriving at Logstash for processing? Setting `log.level: debug` may be useful. Typically when writing a pipeline, I also start with a stdout output, and only remove it once I get my "real" outputs working.
---
### Author:  [@syfy323](https://discuss.elastic.co/u/syfy323)
#### Post date: [April 1, 2018, 7:50am UTC](https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339/3 "2018-04-01T07:50:50Z")
Hi!
This is my config:
> [root@slde6002 ~]# cat /etc/logstash/conf.d/30-syslog.conf
> input {
> syslog {
> type =\> "syslog"
> port =\> 5140
> }
> }
>
> output {
> elasticsearch {
> hosts =\> "192.168.83.20:9200"
> manage\_template =\> true
> }
> }
I have debug enabled and can see every syslog message in output. There is no error or something else.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 29, 2018, 7:51am UTC](https://discuss.elastic.co/t/logstash-no-data-in-kibana/126339/4 "2018-04-29T07:51:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.