# Logstash tcp output to logstash tcp input, losing metadata?

**URL:** <https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796>\
**Category:** Logstash\
**Created:** [April 1, 2019, 1:37pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796 "2019-04-01T13:37:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bjosve](https://avatars.discourse-cdn.com/v4/letter/b/ecae2f/32.png) [@bjosve](https://discuss.elastic.co/u/bjosve)\
**Post date:** [April 1, 2019, 1:37pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796/1 "2019-04-01T13:37:46Z")

</div>

Hi,

I have two logstash servers. Logstash#1 is using tcp output to send data to logstash#2 tcp input. It works fine, but the metadata and fields I add in logstash#1 never seems to reach logstash#2.

Maybe I'm doing something wrong?

If I send logstash#1 output directly to elasticsearch all data is there.

Best Regards,  
Bjorn

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [April 1, 2019, 1:55pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796/2 "2019-04-01T13:55:00Z")

</div>

If you are adding metadata to [@metadata] then it should not be transmitted by the output. If you are adding other fields to the event then it should.

If you are connecting logstash to logstash then the [recommended](https://www.elastic.co/guide/en/logstash/current/ls-to-ls.html) solution is a lumberjack output and a beats input.

What do your logstash configurations look like?

---

<div class="post-metadata">

**Author:** ![bjosve](https://avatars.discourse-cdn.com/v4/letter/b/ecae2f/32.png) [@bjosve](https://discuss.elastic.co/u/bjosve)\
**Post date:** [April 1, 2019, 2:15pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796/3 "2019-04-01T14:15:51Z")

</div>

> [@Badger](#):
>
> If you are adding other fields to the event then it should

Oh yes, I will try that. Forgot to add it to the event itself.

This is just a test setup. We are actually going to use kafka output to kafka input later (kafka before logstash#2).

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 29, 2019, 2:16pm UTC](https://discuss.elastic.co/t/logstash-tcp-output-to-logstash-tcp-input-losing-metadata/174796/4 "2019-04-29T14:16:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.