# Not able to send data from Filebeat to Logstash

**URL:** <https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 26, 2016, 1:46pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856 "2016-02-26T13:46:17Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![vivc](https://avatars.discourse-cdn.com/v4/letter/v/ce7236/32.png) [@vivc](https://discuss.elastic.co/u/vivc)\
**Post date:** [February 26, 2016, 1:46pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/1 "2016-02-26T13:46:18Z")

</div>

Filebeat o/p:

```auto
   ##logstash as output
  logstash:
    # The logstash hosts
    hosts:["172.16.60.32:5044"]

```

Logstash Conf:

```auto
input {
  beats {
    port => 5044
  }
}

```

Getting the following Error in Log:

`Connecting error publishing events (retrying) : dial tcp 172.16.60.32:5044:i/o time out.`

Note: But filebeat is sending ip to other system in network with same configuration by changing the i/p in the filebeat yml file.

Filebeat is installed in Vmbox in a windows system. Initially from Vmbox the logstash server was not pinging but now it's pinging but still the data is not sent.

Please suggest to resolve this issue.

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [February 26, 2016, 1:49pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/2 "2016-02-26T13:49:52Z")

</div>

can you try to ping the target machine? Can you try telnet to target port number? Error indicates target machine not responding to TCP connection request.

---

<div class="post-metadata">

**Author:** ![vivc](https://avatars.discourse-cdn.com/v4/letter/v/ce7236/32.png) [@vivc](https://discuss.elastic.co/u/vivc)\
**Post date:** [February 26, 2016, 2:47pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/3 "2016-02-26T14:47:54Z")

</div>

The target machine is pinging. I tried telnet to port but it's not working . telent ip port. Do we need to do any configuration to make telnet successful.

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [February 26, 2016, 5:52pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/4 "2016-02-26T17:52:00Z")

</div>

is logstash running? Any firewall rules in place?

---

<div class="post-metadata">

**Author:** ![humanApple](https://avatars.discourse-cdn.com/v4/letter/h/838e76/32.png) [@humanApple](https://discuss.elastic.co/u/humanApple)\
**Post date:** [March 7, 2016, 2:51am UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/5 "2016-03-07T02:51:27Z")

</div>

As more,you should install the beats plugin for logstash via "bin/plugin install logstash-input-beats"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:54pm UTC](https://discuss.elastic.co/t/not-able-to-send-data-from-filebeat-to-logstash/42856/6 "2017-07-05T21:54:54Z")

</div>