# No logs in filebeat index even though it has docs

**URL:** <https://discuss.elastic.co/t/no-logs-in-filebeat-index-even-though-it-has-docs/241675>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [July 17, 2020, 2:50pm UTC](https://discuss.elastic.co/t/no-logs-in-filebeat-index-even-though-it-has-docs/241675 "2020-07-17T14:50:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![misheck](https://avatars.discourse-cdn.com/v4/letter/m/5f9b8f/32.png) [@misheck](https://discuss.elastic.co/u/misheck)\
**Post date:** [July 17, 2020, 2:50pm UTC](https://discuss.elastic.co/t/no-logs-in-filebeat-index-even-though-it-has-docs/241675/1 "2020-07-17T14:50:41Z")

</div>

I am using filebeat docker image with syslog enabled. When I run a search under discover I am not getting any results even though I know there is logs because if I run a search in Dev Tools I can see some of the log messages that I am expecting to see. A \_cat/indices?v shows that the filebeat-xxxx index has docs and they are increasing.

I have also checked my Syslog dashboards under dashboard but there no results there. What am I doing wrong or what do I need to do in order to see my logs? I have the system module enabled in filebeat.

Below is my filebeat.yml let me know which other files you need.

```auto
        filebeat.config:
          modules:
            path: ${path.config}/modules.d/*.yml
            reload.enabled: false

        processors:
          - add_cloud_metadata: ~
          - add_docker_metadata: ~

        filebeat.inputs:
        - type: syslog
          protocol.tcp.host: ":9000"
          enabled: true

        output.elasticsearch:
          hosts: ["elasticsearch:9200"]

        setup.kibana:
          host: "kibana:5601"

```

Here is the status of my index

```auto
[myuser@myserver filebeat]$ curl http://x.x.x.x:9200/_cat/indices?v
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open .kibana-event-log-7.8.0-000001 hdYjzCxRQfiiHgBCRW8Fcg 1 0 6 0 30.8kb 30.8kb
green open .apm-custom-link -WG7bYkKSbyZP-Lzg0pSBw 1 0 0 0 208b 208b
green open .kibana_task_manager_1 b7A64Ud7TnCXgBl9xfLVIw 1 0 5 4 21.2kb 21.2kb
green open .apm-agent-configuration P38q3cudSsi3CHnwcxGPMQ 1 0 0 0 208b 208b
green open .kibana_1 inf5hoxqSjO5zI_WFuDP9w 1 0 1509 11 1mb 1mb
yellow open filebeat-7.8.0-2020.07.17-000001 O9X2zfECT7SEN1a9kUi1LQ 1 1 1607 0 364.1kb 364.1kb

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 14, 2020, 4:50pm UTC](https://discuss.elastic.co/t/no-logs-in-filebeat-index-even-though-it-has-docs/241675/2 "2020-08-14T16:50:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.