# Logstash not show any output

**URL:** <https://discuss.elastic.co/t/logstash-not-show-any-output/88445>\
**Category:** Logstash\
**Created:** [June 6, 2017, 3:36pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445 "2017-06-06T15:36:32Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 3:36pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/1 "2017-06-06T15:36:32Z")

</div>

Hi there,  
i have LS and ES are runing,but there is nothing printed in ES or LS.  
this is pipeline config.

input {  
file {  
path =\> "access\_log.txt"  
}  
}  
filter {  
grok {  
match =\> { "message" =\> "%{COMBINEDAPACHELOG}" }  
}  
}  
output {  
elasticsearch {  
hosts =\>"localhost:9200"  
}  
stdout { codec =\> rubydebug }  
}  
My question is how can see the content of the file parsed.  
thank you for your help

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 6, 2017, 4:30pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/2 "2017-06-06T16:30:23Z")

</div>

Try out just only debug part:

```
input {
     file {
          path => "access_log.txt"
     }
}
filter {
      grok {
          match => { "message" => "%{COMBINEDAPACHELOG}" }
     }
}
output {
    stdout { codec => rubydebug }
}

```

If still no output, remove filter, it mean something is wrong with filter and nothing match.

pts0

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 5:13pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/3 "2017-06-06T17:13:22Z")

</div>

Thank you @pts0 for your answer,i removed filter but i still get nothing.  
note : i have those messages on:  
logstash host : localhost:9600

```
host: "user",
version: "5.4.0",
http_address: "127.0.0.1:9600",
id: "03de77c0-a3be-4ff8-b77a-4c37686d4165",
name: "user",
build_date: "2017-04-28T18:14:40Z",
build_sha: "0037bc8cf2e9ff169bf5a08b1946c62dbeb92f9b",
build_snapshot: false

```

elasticsearch host:localhost:9200

```
name: "node1",
cluster_name: "elasticsearch",
cluster_uuid: "kKbMy9_LRw-CcELir6KcFQ",
version: {
number: "5.4.0",
build_hash: "780f8c4",
build_date: "2017-04-28T17:43:27.229Z",
build_snapshot: false,
lucene_version: "6.5.0"
},
tagline: "You Know, for Search"

```

I am grateful for your help.

---

<div class="post-metadata">

**Author:** ![tarp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tarp/32/51884_2.png) [@tarp](https://discuss.elastic.co/u/tarp)\
**Post date:** [June 6, 2017, 6:24pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/4 "2017-06-06T18:24:51Z")

</div>

Hi,  
I have a similar problem, I'm trying to debug one of my logstash inputs by sending the output using "stdout" plugin. This is not working. The logstash log remains unchanged and there are no additional logs in the directory.

Any help, Elastic?

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 6, 2017, 8:40pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/5 "2017-06-06T20:40:58Z")

</div>

when i was using it was working, but is quite a while.

[https://www.elastic.co/guide/en/logstash/current/plugins-outputs-stdout.html](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-stdout.html)

maybe try plain sdtout, you may miss ruby library or somethis similar.

Can you start logstash in with high debug mode ?  
`bin/logstash --debug --log.level trace --config.debug`  
just to try, not in production

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 9:07pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/6 "2017-06-06T21:07:00Z")

</div>

when i start the debug,i get those errors:

`ERROR Unable to create file ${sys:ls.logs}/logstash-${sys:ls.log.format}.log java.io.IOException: La syntaxe du nom de fichier, de répertoire ou de volume est incorrecte`

and in the end  
No configuration file was specified. Perhaps you forgot to provide the '-f yourlogstash.conf' flag?  
usage:  
bin/logstash -f CONFIG\_PATH [-t] [-r] [] [-w COUNT] [-l LOG]  
bin/logstash -e CONFIG\_STR [-t] [--log.level fatal|error|warn|info|debug|trace] [-w COUNT] [-l LOG]  
bin/logstash -i SHELL [--log.level fatal|error|warn|info|debug|trace]  
bin/logstash -V [--log.level fatal|error|warn|info|debug|trace]  
bin/logstash --help

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 6, 2017, 9:10pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/7 "2017-06-06T21:10:38Z")

</div>

sure, i just provided the debug flags, please provide all others

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 9:25pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/8 "2017-06-06T21:25:59Z")

</div>

i start this commande,i see only errors concerned log4j like this:

`ERROR Unable to invoke factory method in class class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile. java.`

please help.

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 6, 2017, 9:28pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/9 "2017-06-06T21:28:08Z")

</div>

where did you started it ? What your log4j config ... did u hv one ?

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 9:31pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/10 "2017-06-06T21:31:30Z")

</div>

i starded it from commande line.i have no log4j.i think just the one which is embeded in logsatsh by default.

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 6, 2017, 9:33pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/11 "2017-06-06T21:33:24Z")

</div>

ok, was the wrong question, I mean in which directory are you and what is the command live u use to start.

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 6, 2017, 11:11pm UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/12 "2017-06-06T23:11:24Z")

</div>

i am in bin directory,i use the command:

`logstash -f pipeline.conf --config.reload.automatic`

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 8, 2017, 7:03am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/13 "2017-06-08T07:03:50Z")

</div>

is the file `pipeline.conf` in bin directory ? If not you should give the full qualified path oder relative to where you are (you probably don't need autorelad now).

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 8, 2017, 9:36am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/14 "2017-06-08T09:36:15Z")

</div>

Thank you verry much.its works now with

```
 input {
    beats {
       port => "5043"
    }
}

```

but doesn't work with

```
input {
     file {
          path => "access_log.txt"
     }
}
```

---

<div class="post-metadata">

**Author:** ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)\
**Post date:** [June 8, 2017, 10:25am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/15 "2017-06-08T10:25:25Z")

</div>

Probably same problem, file should be with full path, if not is not found.

---

<div class="post-metadata">

**Author:** ![baha1](https://avatars.discourse-cdn.com/v4/letter/b/b77776/32.png) [@baha1](https://discuss.elastic.co/u/baha1)\
**Post date:** [June 8, 2017, 10:58am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/16 "2017-06-08T10:58:12Z")

</div>

Yes,it is possible.Thank you for your Joinability.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 10:58am UTC](https://discuss.elastic.co/t/logstash-not-show-any-output/88445/17 "2017-07-06T10:58:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
