# No outputs are defined. Please define one under the output section

**URL:** <https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 7, 2016, 2:10pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626 "2016-01-07T14:10:21Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 7, 2016, 2:10pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/1 "2016-01-07T14:10:22Z")

</div>

Hi i'm very new to filebeat previously i had use log-courier to process my log. i have created the filebeat.yml like this

filebeat:  
prospectors:  
-  
paths:  
- C:\elkenter\Data\sample\*.csv  
document\_type: w3c\_csv2  
config\_dir:  
registry\_file: C:\ProgramData\filebeat\registry  
output:  
elasticsearch:  
enabled: false  
hosts: ["localhost:9200"]  
logstash:  
enabled: true  
hosts: ["localhost:10544"]

while i'm start the filbeat its show the error and get stopped. Error is "Error Initialising publisher: No outputs are defined. Please define one under the output section."

This is my logstash file  
"input {  
beats {  
port =\> 10544   
}  
}

filter{

```
if [type] == "w3c_csv2" {
    
	# drop comment lines
if ([message] =~ "Name") {
  drop{}
}
csv {
    columns => ["Name", "volume", "Dept","Unit"]
    separator => ","
}

```

}  
}

output{

if [type] == "w3c\_csv2" {  
elasticsearch {  
index =\> "logstash-%{[type]}-%{+YYYY.MM.dd}"  
hosts =\> "localhost:9200"  
document\_type =\> "%{[@metadata][type]}"   
}  
}

```
stdout{
  codec => rubydebug
}

```

}"

Kindly help me to resolve the issue and unable to send the value from filebeat to logstash.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [January 7, 2016, 2:38pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/2 "2016-01-07T14:38:15Z")

</div>

Please see my answer in this thread: [CRIT No outputs are defined](https://discuss.elastic.co/t/crit-no-outputs-are-defined/38561)

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 8, 2016, 2:33pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/3 "2016-01-08T14:33:40Z")

</div>

HI,  
I have indented properly. This is my new code its running but no data is sending to logstash  
filebeat:  
prospectors:  
-  
paths:  
- C:\elkenter\Data\sample\*.csv  
document\_type: w3c\_csv2  
config\_dir:  
registry\_file: C:\ProgramData\filebeat\registry  
output:  
elasticsearch:  
enabled: false  
hosts: ["localhost:9200"]  
logstash:  
enabled: true  
hosts: ["localhost:10544"]

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [January 8, 2016, 3:10pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/4 "2016-01-08T15:10:06Z")

</div>

Would you mind pasting your filebeat config into [http://pastie.org/?lang=yaml](http://pastie.org/?lang=yaml) and sharing the link here?

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 8, 2016, 3:12pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/5 "2016-01-08T15:12:06Z")

</div>

Filebeat config file pasted URL [http://pastie.org/10677824](http://pastie.org/10677824)

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [January 8, 2016, 3:26pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/6 "2016-01-08T15:26:29Z")

</div>

Thanks. Would you mind adding this section to your filebeat config for debugging?

```
output:
  console:
    pretty: true

```

This will print any events to the console in addition to sending them to other outputs (e.g. Logstash).

Then, if you run filebeat, do you see any rows from your CSV files being logged to the console as JSON documents?

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 8, 2016, 3:36pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/7 "2016-01-08T15:36:39Z")

</div>

where i can find that in my command prompt itself or else somewhere

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [January 8, 2016, 3:42pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/8 "2016-01-08T15:42:19Z")

</div>

Remove `enabled: true` and `enabled: false` from your configuration file. Those are not valid [configuration options](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-details.html) and have no effect. Also remove the disabled elasticsearch output from your config file. Like so...

```auto
filebeat:
  prospectors:
    -
      paths:
        - C:\elkenter\Data\sample\*.csv
      document_type: w3c_csv2
      config_dir:
  registry_file: C:\ProgramData\filebeat\registry
  config_dir:
output:
  logstash:
     hosts: ["localhost:10544"]

```

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 8, 2016, 3:44pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/9 "2016-01-08T15:44:23Z")

</div>

I have made andrewkroh even though it showing same thing nothing is sending to logstash. Its cracking my mind.

I have one doubt, my filebeat is right or not?

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [January 8, 2016, 4:11pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/10 "2016-01-08T16:11:48Z")

</div>

If you start Filebeat from the command line with the `-e -v -d "*"` it will generate debug information that will help identify the problem. This is similar to what Shaunak was suggesting, just another way of getting the events logged to the console.

Open a command prompt.  
Start Filebeat in the foreground `.\filebeat.exe -c path\to\config.yml -e -v -d "*"`

---

<div class="post-metadata">

**Author:** ![Ganesh2303](https://avatars.discourse-cdn.com/v4/letter/g/57b2e6/32.png) [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Post date:** [January 11, 2016, 6:03am UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/11 "2016-01-11T06:03:30Z")

</div>

HI Andrewkroh,  
Thank you so much now it working and now i can find where i made mistake.

---

<div class="post-metadata">

**Author:** ![rayc](https://avatars.discourse-cdn.com/v4/letter/r/d78d45/32.png) [@rayc](https://discuss.elastic.co/u/rayc)\
**Post date:** [October 29, 2016, 5:56pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/12 "2016-10-29T17:56:26Z")

</div>

Can you share where you made your mistake so that others might learn from that as well? Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:50pm UTC](https://discuss.elastic.co/t/no-outputs-are-defined-please-define-one-under-the-output-section/38626/13 "2017-07-05T21:50:23Z")

</div>


