# No Structured Logs Found in Stack Monitoring when using Logstashs
**URL:** https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776
**Category:** Logstash
**Tags:** elastic-stack-monitoring
**Created:** [February 9, 2022, 6:03pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776 "2022-02-09T18:03:44Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@akballow](https://discuss.elastic.co/u/akballow)
#### Post date: [February 9, 2022, 6:03pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/1 "2022-02-09T18:03:44Z")
Hello All,
Hope someone can help as I spent the past week trying to resolve this issue but couldn't.
So some backstory. If I setup Elasticsearch with filebeat pointing to Elasticsearch, the Logs section in Stack Monitoring reports the server logs and recent logs no problem.
When I go modify the filebeat to point to logstash, the logs do make it to Elasticsearch but I always have the "No Structured Logs Found" with a recommendation of pointing to the .json logs which are already setup and going to Elasticsearch.
My guess in what is happening is maybe the cluster uuid is not being sent with the server logs from logstash to Elasticsearch, where the cluster uuid would make it if going from beats straight to Elasticsearch.
I am still very knew to the whole stack and I imagine you can inject the cluster uuid in the logstash config pipeline, but I can not figure it out!
Hope someone can help!
Thank you
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 9, 2022, 11:05pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/2 "2022-02-09T23:05:30Z")
Welcome to our community! 😃
I think you'd need to share your Logstash config to provide a definitive answer, but my guess would be that the data isn't going to the indices that Monitoring is expecting.
---
### Author:  [@akballow](https://discuss.elastic.co/u/akballow)
#### Post date: [February 10, 2022, 4:25am UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/3 "2022-02-10T04:25:33Z")
Sure the logstash.yml
```auto
config.reload.automatic: true
node.name: logstash.com
http.host: logstash.com
http.port: 9600
xpack.monitoring.elasticsearch.hosts: ["https://logstash.com:9200"]
xpack.monitoring.elasticsearch.username: 'logstash_system'
xpack.monitoring.elasticsearch.password: 'password'
xpack.monitoring.enabled: true
xpack.monitoring.collection.interval: 10s
xpack.monitoring.elasticsearch.ssl.certificate_authority: /etc/logstash/certs/ca.crt
path.data: /var/lib/logstash
path.logs: /var/log/logstash
```
and my inputs is
```auto
input {
beats {
port => 5044
host => "logstash.com"
ssl => true
ssl_key => "/etc/logstash/certs/node.key"
ssl_certificate => "/etc/logstash/certs/node.crt"
}
}
output {
elasticsearch {
hosts => ["https://logstash.com:9200"]
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
cacert => "/etc/logstash/certs/ca.crt"
user => 'elastic'
password => 'password'
}
}
```
---
### Author:  [@akballow](https://discuss.elastic.co/u/akballow)
#### Post date: [February 11, 2022, 7:02pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/4 "2022-02-11T19:02:49Z")
Just to share, if I configure Beats to use Elasticsearch instead of logstash. No issues!
---
### Author:  [@akballow](https://discuss.elastic.co/u/akballow)
#### Post date: [February 16, 2022, 7:43pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/5 "2022-02-16T19:43:03Z")
At this point i am giving up as I have no clue how to troubleshoot this. Hope someone comes along.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 16, 2022, 7:43pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/6 "2022-03-16T19:43:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [April 10, 2022, 11:13pm UTC](https://discuss.elastic.co/t/no-structured-logs-found-in-stack-monitoring-when-using-logstashs/296776/7 "2022-04-10T23:13:54Z")
You may be missing the `pipeline` setting
> **[Use ingest pipelines for parsing | Logstash Reference \[8.1\] | Elastic](https://www.elastic.co/guide/en/logstash/current/use-ingest-pipelines.html)**
```auto
input {
beats {
port => 5044
}
}
output {
if [@metadata][pipeline] {
elasticsearch {
hosts => "https://061ab24010a2482e9d64729fdb0fd93a.us-east-1.aws.found.io:9243"
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
pipeline => "%{[@metadata][pipeline]}"
user => "elastic"
password => "secret"
}
} else {
elasticsearch {
hosts => "https://061ab24010a2482e9d64729fdb0fd93a.us-east-1.aws.found.io:9243"
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
user => "elastic"
password => "secret"
}
}
}
```