# \[Solved\] Index Patterns don't match

**URL:** https://discuss.elastic.co/t/solved-index-patterns-dont-match/101059
**Category:** Logstash
**Created:** [September 19, 2017, 5:15pm UTC](https://discuss.elastic.co/t/solved-index-patterns-dont-match/101059 "2017-09-19T17:15:46Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![KnechtionsCoding](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/knechtionscoding/32/22079_2.png) [@KnechtionsCoding](https://discuss.elastic.co/u/KnechtionsCoding)
#### Post date: [September 19, 2017, 5:15pm UTC](https://discuss.elastic.co/t/solved-index-patterns-dont-match/101059/1 "2017-09-19T17:15:46Z")

</div>

Logs that are pushed from filebeat aren't showing up in logstash.

My pipeline from logstash to elasticsearch works, as metric beat and heartbeat are getting pushed through, but my logs from filebeat are disappearing into thin air.

Here is my filebeat config:

* * *

filebeat.prospectors:

- paths:
  - /usr/local/apache-tomcat-8.0.35/logs/\*.log  
tags: ["Company-Application"]  
fields:  
type: company-logs

output.logstash:  
hosts: ["elk-server:10200"]  
bulk\_max\_size: 1024

* * *

Logstash config:

input {  
beats {  
port =\> {{ logstash\_beats\_port }}  
}  
}

filter {  
if [type] == "company-logs" {  
json {  
source =\> message  
}  
}  
}

filter {  
if "Company-Application" in [tags] {  
json {  
source =\> message  
}  
}  
}

filter {  
if [fields][log\_type] == "company-logs" {  
json {  
source =\> message  
}  
}  
}  
output {

```
elasticsearch { 
    hosts => ["localhost:9200"]
    index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" 
    document_type => "%{[@metadata][type]}" 
}

```

}

* * *

I'm not getting any errors in the filebeat log or the logstash log. So I assume that this is an issue with how I am filtering the information, or something along those lines.

---

<div class="post-metadata">

### Author: ![KnechtionsCoding](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/knechtionscoding/32/22079_2.png) [@KnechtionsCoding](https://discuss.elastic.co/u/KnechtionsCoding)
#### Post date: [September 19, 2017, 6:00pm UTC](https://discuss.elastic.co/t/solved-index-patterns-dont-match/101059/2 "2017-09-19T18:00:11Z")

</div>

There was an issue with filebeat not registering logstash as the output. Reinstalling filebeat resolved the issue.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 17, 2017, 6:00pm UTC](https://discuss.elastic.co/t/solved-index-patterns-dont-match/101059/3 "2017-10-17T18:00:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
