# Logstash not indexing anything

**URL:** <https://discuss.elastic.co/t/logstash-not-indexing-anything/24844>\
**Category:** Logstash\
**Created:** [July 3, 2015, 7:33am UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844 "2015-07-03T07:33:59Z")\
**Posts on this page:** 8\
**Page:** 2

<div class="post-metadata">

**Author:** ![simonrisberg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simonrisberg/32/3513_2.png) [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\
**Post date:** [July 3, 2015, 1:12pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/22 "2015-07-03T13:12:50Z")

</div>

No I have tons of gb left. I went into /var/log/elasticsearch and wrote "ls" to get a list of the items. I even wrote ls -li to get a more structured list but then it said "total 0"

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 3, 2015, 1:20pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/23 "2015-07-03T13:20:55Z")

</div>

How are you starting ES? With what arguments (`ps aux | grep elasticsearch` will do)?

---

<div class="post-metadata">

**Author:** ![simonrisberg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simonrisberg/32/3513_2.png) [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\
**Post date:** [July 3, 2015, 1:24pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/24 "2015-07-03T13:24:55Z")

</div>

I'm actually running elasticsearch, logstash and kibana in a docker container so they become their own processes. I have a premade configuration file to start them all. I am starting elasticsearch with "./es"

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 3, 2015, 1:35pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/25 "2015-07-03T13:35:10Z")

</div>

Sorry, I'm out of patience here. The ES command line probably contains the log file path. Either way, locate the log file (elk.log in your case). Good luck.

---

<div class="post-metadata">

**Author:** ![simonrisberg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simonrisberg/32/3513_2.png) [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\
**Post date:** [July 3, 2015, 1:37pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/26 "2015-07-03T13:37:22Z")

</div>

Thank you. I just solved it although I don't think it is the way you are supposed to solve it. I went into the elasticsearch configuration file and changed the cluster.name to something else. I figured I'd give it a try because the cluster was red.

---

<div class="post-metadata">

**Author:** ![simonrisberg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simonrisberg/32/3513_2.png) [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\
**Post date:** [July 3, 2015, 1:39pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/27 "2015-07-03T13:39:11Z")

</div>

Sorry if I disturbed you in some way. I panicked because I'm pretty new to elastic and apparently it was much bigger than I thought.

---

<div class="post-metadata">

**Author:** ![sureshadapa](https://avatars.discourse-cdn.com/v4/letter/s/0ea827/32.png) [@sureshadapa](https://discuss.elastic.co/u/sureshadapa)\
**Post date:** [September 24, 2015, 5:40am UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/28 "2015-09-24T05:40:37Z")

</div>

I had same problem "retrying failed action with response code: 503", :level=\>:warn}" and was able to resolved it. Hope below info will be help full to others.

My Env is elasticsearch-1.7.1 kibana-4.1.1-linux-x64 logstash-1.5.4

In ES web interface check the health  
http://:9200/\_plugin/marvel/sense/index.html

GET \_cluster/health?level=indices&pretty

Stop ES and Kibana.

You might notice few indices "status":"red" - Example .marvel-2015.09.22

There will be \*.recovery files inside indices folder.  
Remove them and other indices after that date.

- Example .marvel-2015.09.23  
.marvel-2015.09.24

And then try to start Elastic search, Kibana

and then load data using logstash

./logstash -f ../../../logstash-config/CRev\_db2\_config\_v1.0.cfg --configtest  
./logstash -f ../../../logstash-config/CRev\_db2\_config\_v1.0.cfg

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:28am UTC](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844/29 "2017-07-06T05:28:12Z")

</div>

Closed on July 6, 2017, 5:28am UTC



[Previous page](https://discuss.elastic.co/t/logstash-not-indexing-anything/24844.md?page=1)
