# Ship log continually

**URL:** <https://discuss.elastic.co/t/ship-log-continually/56138>\
**Category:** Logstash\
**Created:** [July 21, 2016, 9:09pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138 "2016-07-21T21:09:49Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [July 21, 2016, 9:09pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138/1 "2016-07-21T21:09:49Z")

</div>

Hi,  
I am trying to ship logs to a different server using a Logstash forwarder and a redis queue...everything is working fine. Logs are shipping. However, I want to continuously ship logs. Currently what i have is, it ships logs once and then it stops shipping and I get the  
"No results found  
Unfortunately I could not find any results matching your search. I tried really hard. I looked all over the place and frankly, I just couldn't find anything good. Help me, help you. Here are some ideas:"  
page in Kibana.

I have tried running the agent as ./logstash agent -f logshipper.conf &  
disown

but it still doesn't work. It will only ship the log once and then show the "No results found" page in Kibana.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 21, 2016, 9:15pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138/2 "2016-07-21T21:15:53Z")

</div>

This sounds like a Logstash problem not a Kibana one.

Perhaps moving it to that category and adding more details will allow people to help.

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [July 21, 2016, 9:17pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138/3 "2016-07-21T21:17:29Z")

</div>

Hi Bishaka,

You might need to ask your question in the logstash discuss channel.

But you can check what indexes your Elasticsearch cluster has loaded in it like and how many documents with [http://localhost:9200/\_cat/indices](http://localhost:9200/_cat/indices) (change to your elasticsearch host and port if it's not localhost:9200)

Then in Kibana you would create an index pattern for one or more of those indexes. When you do that it should show you the fields in that index.

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [July 21, 2016, 10:03pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138/4 "2016-07-21T22:03:18Z")

</div>

Hi,

I am assuming it is not shipping logs very frequently is because the log file I am trying to ship was updated yesterday. Logstash would only ship frequently if the logfile is updated frequently. Is this correct? Can someone verify this?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 22, 2016, 8:51am UTC](https://discuss.elastic.co/t/ship-log-continually/56138/5 "2016-07-22T08:51:19Z")

</div>

> Logstash would only ship frequently if the logfile is updated frequently. Is this correct?

What do you mean? If the log file isn't updated with new data Logstash obviously won't ship anything.

---

<div class="post-metadata">

**Author:** ![bishaka](https://avatars.discourse-cdn.com/v4/letter/b/e480ec/32.png) [@bishaka](https://discuss.elastic.co/u/bishaka)\
**Post date:** [July 22, 2016, 5:24pm UTC](https://discuss.elastic.co/t/ship-log-continually/56138/6 "2016-07-22T17:24:07Z")

</div>

Oh okay! That's what I thought. Thank you for confirming.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:46am UTC](https://discuss.elastic.co/t/ship-log-continually/56138/7 "2017-07-06T04:46:49Z")

</div>


