# Logstash output question **URL:** \ **Category:** Logstash\ **Created:** [July 7, 2022, 6:12pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138 "2022-07-07T18:12:00Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![jlbai](https://avatars.discourse-cdn.com/v4/letter/j/f04885/32.png) [@jlbai](https://discuss.elastic.co/u/jlbai)\ **Post date:** [July 7, 2022, 6:12pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138/1 "2022-07-07T18:12:00Z")
sh-4.2$ sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/firewall.conf Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release. WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console [INFO] 2022-07-07 17:54:09.378 [main] runner - Starting Logstash {"logstash.version"=\>"8.2.3", "jruby.version"=\>"jruby 9.2.20.1 (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.15+10 on 11.0.15+10 +indy +jit [linux-x86\_64]"} [INFO] 2022-07-07 17:54:09.385 [main] runner - JVM bootstrap flags: [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -Djruby.jit.threshold=0, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, -Djruby.regexp.interruptible=true, -Djdk.io.File.enableADS=true, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED] [WARN] 2022-07-07 17:54:09.677 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified [INFO] 2022-07-07 17:54:10.880 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=\>9601, :ssl\_enabled=\>false} [INFO] 2022-07-07 17:54:11.515 [Converge PipelineAction::Create] Reflections - Reflections took 80 ms to scan 1 urls, producing 120 keys and 395 values [INFO] 2022-07-07 17:54:12.026 [Converge PipelineAction::Create] javapipeline - Pipeline `main` is configured with `pipeline.ecs_compatibility: v8` setting. All plugins in this pipeline will default to `ecs_compatibility => v8` unless explicitly configured otherwise. [INFO] 2022-07-07 17:54:12.146 [[main]-pipeline-manager] javapipeline - Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>2, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50, "pipeline.max\_inflight"=\>250, "pipeline.sources"=\>["/etc/logstash/conf.d/firewall.conf"], :thread=\>"#\"} [INFO] 2022-07-07 17:54:12.762 [[main]-pipeline-manager] javapipeline - Pipeline Java execution initialization time {"seconds"=\>0.61} [INFO] 2022-07-07 17:54:12.790 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=\>"main"} [INFO] 2022-07-07 17:54:12.892 [Agent thread] agent - Pipelines running {:count=\>1, :running\_pipelines=\>[:main], :non\_running\_pipelines=\>} [INFO] 2022-07-07 17:54:12.953 [[main]\"192.168.56.67:514"} [INFO] 2022-07-07 17:54:12.979 [[main]\"192.168.56.67:514", :receive\_buffer\_bytes=\>"106496", :queue\_size=\>"2000"} then the cursor just blinks trying to figure out why i am not getting any output my output is set to std. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [July 7, 2022, 6:40pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138/2 "2022-07-07T18:40:10Z")
> [@jlbai](#): > > [INFO] 2022-07-07 17:54:12.790 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=\>"main"} logstash is running and waiting for data. What does your firewall.conf configuration look like? ---
**Author:** ![jlbai](https://avatars.discourse-cdn.com/v4/letter/j/f04885/32.png) [@jlbai](https://discuss.elastic.co/u/jlbai)\ **Post date:** [July 7, 2022, 7:43pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138/3 "2022-07-07T19:43:11Z")
like this input { udp { host =\> "10.0.56.67" port =\> 514 } } filter {} output { stdout {} } ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [July 7, 2022, 10:25pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138/4 "2022-07-07T22:25:25Z")
You say your filter has `host => "10.0.56.67"` but the log says logstash is listening on `:address=>"192.168.56.67:514"`. Either way, I don't think any UDP packets are being sent, or they are blocked by a firewall, etc. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 4, 2022, 10:26pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138/5 "2022-08-04T22:26:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.