# No entries in kibana for a specific host

**URL:** <https://discuss.elastic.co/t/no-entries-in-kibana-for-a-specific-host/93204>\
**Category:** Logstash\
**Created:** [July 14, 2017, 2:33pm UTC](https://discuss.elastic.co/t/no-entries-in-kibana-for-a-specific-host/93204 "2017-07-14T14:33:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![andsk8](https://avatars.discourse-cdn.com/v4/letter/a/c5a1d2/32.png) [@andsk8](https://discuss.elastic.co/u/andsk8)\
**Post date:** [July 14, 2017, 2:33pm UTC](https://discuss.elastic.co/t/no-entries-in-kibana-for-a-specific-host/93204/1 "2017-07-14T14:33:26Z")

</div>

Hi, I have a ELK stack working with filebeat in every server I want to retrieve logs from. I have nginx, apache and monolog logs that work perfectly. Every kind of of log has his own .conf file in the conf.d folder in /etc/logstash/. I recently added a wowza.conf, installed filebeat in the wowza server. Everything is configured the same way as the others. I have no entries in kibana for that host, no matter what range of time I choose, even using "last 5 years" I have no logs. I thought it was a grok\_parser\_failure, but everything looks fine in the logstash-plain.log. I edited the file /etc/logstash/flogstash.yml and added "log.level: debug" and for that specific host, I read the same kind of output.

[2017-07-11T17:04:22,148][DEBUG][logstash.pipeline] output received {"event"=\>{"functionalgroup"=\>"frontend", "offset"=\>25380894, "scalinggroup"=\>"backend", "module"=\>"wowza", "input\_type"=\>"log", "source"=\>"/usr/local/WowzaStreamingEngine/logs/wowzastreamingengine\_access.log", "message"=\>"2017-07-11\t17:04:10\tART\tseek\tstream\tINFO\t200\t0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil\t-\t\_defaultVHost\_\tvodhls\t\_definst\_\t4691.171\t192.168.10.86\t1935\thttp://192.168.10.86:1935/vodhls/_definst_/0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil/media\_b1396113\_t64SERfTA==\_0.ts\t192.168.10.68\thttp (cupertino)\t-\tOpera/9.80 (Linux armv7l; Opera TV Store/6155) Presto/2.12.407 Version/12.51 Model/Hisense-MTK5655 /EM\t1607076926\t0\t1692704268\t1382\t4758025\t0\t1691824972\t0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil\t-\t-\t-\t-\t-\thttp://192.168.10.86:1935/vodhls/_definst_/0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil/media\_b1396113\_t64SERfTA==\_0.ts\thttp://192.168.10.86:1935/vodhls/_definst_/0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil/media\_b1396113\_t64SERfTA==\_0.ts\t-\thttp://192.168.10.86:1935/vodhls/_definst_/0a933b92-09fa-4f43-881b-58ebc2108ad5\_ToyStory3/media/ToyStory3\_HD\_es\_nosub.smil/media\_b1396113\_t64SERfTA==\_0.ts\t-", "type"=\>"wowza", "version"=\>"v5", "tags"=\>["beats\_input\_codec\_plain\_applied"], "component"=\>"-", "@timestamp"=\>2017-07-11T20:04:17.402Z, "service"=\>"nginx", "@version"=\>"1", "beat"=\>{"hostname"=\>"stream-03", "name"=\>"stream-03", "version"=\>"5.5.0"}, "host"=\>"stream-03", "action"=\>"-", "fields"=\>{}}}

I have no clue on finding what is wrong. Can anyone help me find the problem? Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 11, 2017, 2:34pm UTC](https://discuss.elastic.co/t/no-entries-in-kibana-for-a-specific-host/93204/2 "2017-08-11T14:34:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.