# Logstash not receiving server logs **URL:** \ **Category:** Logstash\ **Created:** [August 5, 2015, 8:26am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858 "2015-08-05T08:26:55Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![karthick](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@karthick](https://discuss.elastic.co/u/karthick)\ **Post date:** [August 5, 2015, 8:26am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/1 "2015-08-05T08:26:55Z")
Hi Am trying to config logstash server for my application server. I am not able to see the logs in the logstash. I need some ones help to check this configuration. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [August 5, 2015, 8:28am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/2 "2015-08-05T08:28:27Z")
If you provide additional details about your configuration we might be able to help. ---
**Author:** ![karthick](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@karthick](https://discuss.elastic.co/u/karthick)\ **Post date:** [August 5, 2015, 8:32am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/3 "2015-08-05T08:32:30Z")
Sure . This is the instruction which i have followed to setup logstash server. But am not able to see the the logs in Kibana. > **[How To Install Elasticsearch, Logstash, and Kibana (ELK Stack) on CentOS 7 |...](https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-centos-7)** > > In this tutorial, we will go over the installation of the Elasticsearch ELK Stack on CentOS 7—that is, Elasticsearch 2.1.x, Logstash 2.1.x, and Kibana 4.3.x. We will also show you how to configure it to gather and visualize the syslogs of your... Thanks, ---
**Author:** ![karthick](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@karthick](https://discuss.elastic.co/u/karthick)\ **Post date:** [August 5, 2015, 8:34am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/4 "2015-08-05T08:34:08Z")
/var/log/elasticsearch in this log i have seen the exception [2015-08-04 10:03:17,617][DEBUG][action.search.type] [White Pilgrim] [logstash-2015.07.30][2], node[2JOk8\_wnSqSpz5ZG9fFcrg], [P], s[STARTED]: Failed to execute [org.elasticsearch.action.search.SearchRequest@5e70f38b] lastShard [true] org.elasticsearch.search.SearchParseException: [logstash-2015.07.30][2]: from[-1],size[500]: Parse Failure [Failed to parse source [{"size":500,"sort":{"received\_at":"desc"},"highlight":{"pre\_tags":["@kibana-highlighted-field@"],"post\_tags":["@/kibana-highlighted-field@"],"fields":{"_":{}}},"aggs":{"2":{"date\_histogram":{"field":"received\_at","interval":"30m","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":0,"extended\_bounds":{"min":1438626600000,"max":1438712999999}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"range":{"received\_at":{"gte":1438626600000,"lte":1438712999999}}}],"must\_not":[]}}}},"fields":["_","\_source"],"script\_fields":{},"fielddata\_fields":["@timestamp","received\_at"]}]] at org.elasticsearch.search.SearchService.parseSource(SearchService.java:687) at org.elasticsearch.search.SearchService.createContext(SearchService.java:543) at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:515) at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:277) at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:231) at org.elasticsearch.search.action.SearchServiceTransportAction$5.call(SearchServiceTransportAction.java:228) at org.elasticsearch.search.action.SearchServiceTransportAction$23.run(SearchServiceTransportAction.java:559) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) Caused by: org.elasticsearch.search.SearchParseException: [logstash-2015.07.30][2]: from[-1],size[500]: Parse Failure [No mapping found for [received\_at] in order to sort on] at org.elasticsearch.search.sort.SortParseElement.addSortField(SortParseElement.java:210) at org.elasticsearch.search.sort.SortParseElement.addCompoundSortField(SortParseElement.java:141) at org.elasticsearch.search.sort.SortParseElement.parse(SortParseElement.java:96) at org.elasticsearch.search.SearchService.parseSource(SearchService.java:671) ... 9 more [2015-08-04 10:03:17,620][DEBUG][action.search.type] [White Pilgrim] [logstash-2015.08.02][4], node[2JOk8\_wnSqSpz5ZG9fFcrg], [P], s[STARTED]: Failed to execute [org.elasticsearch.action.search.SearchRequest@5e70f38b] lastShard [true] org.elasticsearch.search.SearchParseException: [logstash-2015.08.02][4]: from[-1],size[500]: Parse Failure [Failed to parse source [{"size":500,"sort":{"received\_at":"desc"},"highlight":{"pre\_tags":["@kibana-highlighted-field@"],"post\_tags":["@/kibana-highlighted-field@"],"fields":{"_":{}}},"aggs":{"2":{"date\_histogram":{"field":"received\_at","interval":"30m","pre\_zone":"+05:30","pre\_zone\_adjust\_large\_interval":true,"min\_doc\_count":0,"extended\_bounds":{"min":1438626600000,"max":1438712999999}}}},"query":{"filtered":{"query":{"match\_all":{}},"filter":{"bool":{"must":[{"range":{"received\_at":{"gte":1438626600000,"lte":1438712999999}}}],"must\_not":[]}}}},"fields":["_","\_source"],"script\_fields":{},"fielddata\_fields":["@timestamp","received\_at"]}]] at org.elasticsearch.search.SearchService.parseSource(SearchService.java:687 ---
**Author:** ![karthick](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@karthick](https://discuss.elastic.co/u/karthick)\ **Post date:** [August 5, 2015, 9:26am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/5 "2015-08-05T09:26:17Z")
Hi, What information do like to see ? Thanks, ---
**Author:** ![karthick](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@karthick](https://discuss.elastic.co/u/karthick)\ **Post date:** [August 5, 2015, 9:39am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/6 "2015-08-05T09:39:59Z")
/var/log/nginx I have seen this error in /var/log/nginx 265 2015/08/05 09:37:02 [error] 980#0: \*7670 connect() failed (111: Connection refused) while connecting to upstream, client: 115.160.252.214, server: [kachyng.log.com](http://kachyng.log.com), request: "POST /elasticsearch/\_msearch?timeout=0&ignore\_unavailable=true&preference=1438754906134 HTTP/1.1", upstream: "http://[::1]:5601/elasticsearch/\_msearch?timeout=0&ignore\_unavailable=true&preference=1438754906134", host: "[ec2-54-158-167-177.compute-1.amazonaws.com](http://ec2-54-158-167-177.compute-1.amazonaws.com)", referrer: "[http://ec2-54-158-167-177.compute-1.amazonaws.com/](http://ec2-54-158-167-177.compute-1.amazonaws.com/)" ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:32am UTC](https://discuss.elastic.co/t/logstash-not-receiving-server-logs/26858/7 "2017-07-06T05:32:51Z")