# Need help, filebeat doesn't seem working (beginner) **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [June 28, 2016, 4:59am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103 "2016-06-28T04:59:08Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![mhui](https://avatars.discourse-cdn.com/v4/letter/m/ec9cab/32.png) [@mhui](https://discuss.elastic.co/u/mhui)\ **Post date:** [June 28, 2016, 4:59am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103/1 "2016-06-28T04:59:08Z")
Filebeat is not picking up logs and there is no log generated in C:\ProgramData\filebeat\Logs, any help is appreciated, thanks ```auto filebeat: prospectors: - paths: - "D:/Input-log-files/SUNMRZBK5X942ZZ/*/*.log" input_type: log document_type: log registry_file: "C:/ProgramData/filebeat/registry" output: elasticsearch: hosts: ["localhost:9200"] shipper: logging: to_files: true files: path: C:\ProgramData\filebeat\Logs name: filebeat rotateeverybytes: 10485760 # = 10MB ``` ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [June 28, 2016, 11:12am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103/2 "2016-06-28T11:12:22Z")
Under logging, you can set the log level to `info` or `debug`: [https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#\_level](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#_level) This should provide you with more information on what is happening. ---
**Author:** ![mhui](https://avatars.discourse-cdn.com/v4/letter/m/ec9cab/32.png) [@mhui](https://discuss.elastic.co/u/mhui)\ **Post date:** [June 28, 2016, 5:58pm UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103/3 "2016-06-28T17:58:15Z")
Thank you, it looks like it is running but it is not showing on localhost:5601 Kibana, can this be index issue? I am using windows and I followed the guide to load the template with: Invoke-WebRequest -Method Put -InFile filebeat.template.json -Uri [http://localhost:9200/\_template/filebeat?pretty](http://localhost:9200/_template/filebeat?pretty) log after I changed info to debug: 2016-06-28T10:52:28-07:00 DBG Disable stderr logging 2016-06-28T10:52:28-07:00 DBG Initializing output plugins 2016-06-28T10:52:28-07:00 INFO GeoIP disabled: No paths were set under output.geoip.paths 2016-06-28T10:52:28-07:00 DBG ES Ping(url=http://localhost:9200, timeout=1m30s) 2016-06-28T10:52:28-07:00 DBG Ping status code: 200 2016-06-28T10:52:28-07:00 INFO Activated elasticsearch as output plugin. 2016-06-28T10:52:28-07:00 DBG Create output worker 2016-06-28T10:52:28-07:00 DBG No output is defined to store the topology. The server fields might not be filled. 2016-06-28T10:52:28-07:00 INFO Publisher name: WinlogBeat-test 2016-06-28T10:52:28-07:00 INFO Flush Interval set to: 1s 2016-06-28T10:52:28-07:00 INFO Max Bulk Size set to: 50 2016-06-28T10:52:28-07:00 DBG create bulk processing worker (interval=1s, bulk size=50) 2016-06-28T10:52:28-07:00 INFO Init Beat: filebeat; Version: 1.2.3 2016-06-28T10:52:28-07:00 INFO filebeat sucessfully setup. Start running. 2016-06-28T10:52:28-07:00 INFO Registry file set to: C:\ProgramData\filebeat\registry 2016-06-28T10:52:28-07:00 INFO Loading registrar data from C:\ProgramData\filebeat\registry 2016-06-28T10:52:28-07:00 DBG Set idleTimeoutDuration to 5s 2016-06-28T10:52:28-07:00 DBG File Configs: [/var/log/_.log C:/ELK-Stack/filebeat-1.2.3-windows/log/_.log] 2016-06-28T10:52:28-07:00 INFO Set ignore\_older duration to 0 2016-06-28T10:52:28-07:00 INFO Set close\_older duration to 1h0m0s 2016-06-28T10:52:28-07:00 INFO Set scan\_frequency duration to 10s 2016-06-28T10:52:28-07:00 INFO Input type set to: log 2016-06-28T10:52:28-07:00 INFO Set backoff duration to 1s 2016-06-28T10:52:28-07:00 INFO Set max\_backoff duration to 10s 2016-06-28T10:52:28-07:00 INFO force\_close\_file is disabled 2016-06-28T10:52:28-07:00 DBG Waiting for 1 prospectors to initialise 2016-06-28T10:52:28-07:00 INFO Starting prospector of type: log 2016-06-28T10:52:28-07:00 DBG exclude\_files: 2016-06-28T10:52:28-07:00 DBG scan path /var/log/_.log 2016-06-28T10:52:28-07:00 DBG scan path C:/ELK-Stack/filebeat-1.2.3-windows/log/_.log 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test1.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test2.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test3.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test4.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test5.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test6.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test7.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test8.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Check file for harvesting: C:\ELK-Stack\filebeat-1.2.3-windows\log\test9.log 2016-06-28T10:52:28-07:00 DBG Same file as before found. Fetch the state. 2016-06-28T10:52:28-07:00 DBG Start harvesting unknown file: C:\ELK-Stack\filebeat-1.2.3-windows\log\test8.log 2016-06-28T10:52:28-07:00 DBG Resuming harvester on a previously harvested file: C:\ELK-Stack\filebeat-1.2.3-windows\log\test8.log 2016-06-28T10:52:28-07:00 DBG Start harvesting unknown file: C:\ELK-Stack\filebeat-1.2.3-windows\log\test9.log 2016-06-28T10:52:28-07:00 DBG Resuming harvester on a previously harvested file: C:\ELK-Stack\filebeat-1.2.3-windows\log\test9.log 2016-06-28T10:52:28-07:00 DBG harvest: "C:\ELK-Stack\filebeat-1.2.3-windows\log\test9.log" (offset snapshot:0) ![](https://us1.discourse-cdn.com/elastic/original/2X/6/6264650bc3b0ee292456f1e4bf4758890b3bbb10.png) ![](https://us1.discourse-cdn.com/elastic/original/2X/7/757f569b3e31bd2d591308ecc8f96f9d6059e487.png) ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [June 29, 2016, 6:31am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103/4 "2016-06-29T06:31:06Z")
It seems like you started filebeat previously and it has already read your log files. Filebeat continues reading at the last position. To restart from scratch remove the registry file (path can be found in your config). In case there were no new log files in the last 15 minutes, make sure to query a longer period in Kibana. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 19, 2016, 4:59am UTC](https://discuss.elastic.co/t/need-help-filebeat-doesnt-seem-working-beginner/54103/5 "2016-07-19T04:59:08Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.