# Logstash not able to pass data to elasticsearch

**URL:** <https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851>\
**Category:** Elasticsearch\
**Created:** [June 24, 2016, 6:09am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851 "2016-06-24T06:09:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![gaurav\_S\_javheri](https://avatars.discourse-cdn.com/v4/letter/g/82dd89/32.png) [@gaurav\_S\_javheri](https://discuss.elastic.co/u/gaurav_S_javheri)\
**Post date:** [June 24, 2016, 6:09am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/1 "2016-06-24T06:09:46Z")

</div>

I have setup Logstash server 1-\> Kafka -\> Logstash server 2-\> Elasticsearch -\> Kibana setup. Below is Logstash server 2 configuration files.

1. 03-logstash-logs-kafka-consumer.conf

input {  
kafka {  
zk\_connect =\> 'zk\_netaddress:2181'  
topic\_id =\> 'logstash\_logs'  
codec =\> "json"  
}  
}  
output{  
stdout{}  
}

1. 30-elasticsearch-output.conf

output {  
elasticsearch {  
hosts =\> ["localhost:9200"]  
manage\_template =\> false  
index =\> "%{[@metadata][beat]}-%{+YYYY.MM.dd}"  
document\_type =\> "%{[@metadata][type]}"  
}  
}

Though Logs are travelling from Logstash server 1 to Logstash server 2 through Kafka and Logstash server 2 can also output it to /var/log/logstash/logstash.stdout file but It is not able to output to elasticsearch configure with it. I have checked all services are running well and not Exception in logs of any service. Please post your suggestion. Thanks a lot in advance.

---

<div class="post-metadata">

**Author:** ![mvg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mvg/32/98890_2.png) [@mvg](https://discuss.elastic.co/u/mvg)\
**Post date:** [June 24, 2016, 9:37am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/2 "2016-06-24T09:37:22Z")

</div>

Are you're able to send this to your ES instance:

> curl -XPUT "[http://hostname:9200/test/test/1](http://hostname:9200/test/test/1)" -d '{}'

If you're able to do this, then the issue is on the Logstash side.

---

<div class="post-metadata">

**Author:** ![gaurav\_S\_javheri](https://avatars.discourse-cdn.com/v4/letter/g/82dd89/32.png) [@gaurav\_S\_javheri](https://discuss.elastic.co/u/gaurav_S_javheri)\
**Post date:** [June 27, 2016, 4:24am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/3 "2016-06-27T04:24:25Z")

</div>

I am able to do curl -XPUT "[http://hostname:9200/test/test/1](http://hostname:9200/test/test/1)" -d '{}' . Still facing issue same issue mentioned in Post.

---

<div class="post-metadata">

**Author:** ![vienodp](https://avatars.discourse-cdn.com/v4/letter/v/46a35a/32.png) [@vienodp](https://discuss.elastic.co/u/vienodp)\
**Post date:** [June 27, 2016, 5:44am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/4 "2016-06-27T05:44:10Z")

</div>

Hi ,

So if the issue is at logstash ,we do not see any related suspicious log entries in logstash logs.  
I enabled debug logs for logstash but that too did not help.  
So what could be the reasons behind this. Does logstash needs any specific configuration when use with ELK ?

Regards,  
Vinod

---

<div class="post-metadata">

**Author:** ![arpan](https://avatars.discourse-cdn.com/v4/letter/a/e480ec/32.png) [@arpan](https://discuss.elastic.co/u/arpan)\
**Post date:** [September 16, 2016, 6:18am UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/5 "2016-09-16T06:18:34Z")

</div>

Hi gaurav,

I am facing the same issue. Any resolution to this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:19pm UTC](https://discuss.elastic.co/t/logstash-not-able-to-pass-data-to-elasticsearch/53851/6 "2017-07-05T22:19:48Z")

</div>