Logstash not shipping data to Elasticsearch

Elastic Stack Logstash
2

logstash.yml - parameters related how will LS run, batch size, log info/debug/..., xpack settings etc.
syslog.conf - configuration related to data processing - input, filter, output.

As always said, and again... add debug in output:

output {
    elasticsearch {
      hosts => ["http://server:9200"]
      index => "indexname"
    } 

    stdout {codec => rubydebug}
}
  1. Check is there any data displayed in the command line. Start LS as process not as service.
  2. Check does your data come to LS
    curl http://localhost:9200/_nodes/stats/pipelines?pretty
  3. If there is no data, make another syslog-nofiltering.conf
input { ... same, copy from /etc/logstash/conf.d/syslog.conf ... }
filter {} # emty, no filtering
output { stdout {codec => rubydebug} }
  1. Use tcpdump to dump network data for your port.