# Testing filebeat+logstash

**URL:** <https://discuss.elastic.co/t/testing-filebeat-logstash/32811>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 22, 2015, 10:34pm UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811 "2015-10-22T22:34:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![erikstephens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/erikstephens/32/5430_2.png) [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Post date:** [October 22, 2015, 10:34pm UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811/1 "2015-10-22T22:34:58Z")

</div>

Is there a way to have filebeat exit once it reaches end-of-file for all prospectors? The use case I'm trying to support is to launch filebeat with a known set of payloads, send to a test instance of logstash, and then compare the logstash results - an integration test for our logstash configuration.

I suppose I could spawn the filebeat process in the background and kill it once I see "no events to publish" in its output, but I was hoping for something a bit simpler & more robust.

Or, I'm open to suggestions on how else to automatically test our logstash configuration.

Thank you,  
Erik Stephens

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [October 23, 2015, 7:29am UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811/2 "2015-10-23T07:29:28Z")

</div>

Hi @erikstephens

Currently this is not possible. We were thinking of implementing something like this for our own system and integration test cases. The idea was to have a flag on startup that every harvester is only started once and runs until no new lines are found. Do get this implemented some refactoring of the prospector and harvester are needed.

Feel free to open an issue for it in the filebeat repo: [https://github.com/elastic/filebeat](https://github.com/elastic/filebeat)

---

<div class="post-metadata">

**Author:** ![erikstephens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/erikstephens/32/5430_2.png) [@erikstephens](https://discuss.elastic.co/u/erikstephens)\
**Post date:** [October 23, 2015, 3:59pm UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811/3 "2015-10-23T15:59:19Z")

</div>

Ok, thx. Issue here: [https://github.com/elastic/filebeat/issues/134](https://github.com/elastic/filebeat/issues/134)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:58pm UTC](https://discuss.elastic.co/t/testing-filebeat-logstash/32811/4 "2017-07-05T21:58:36Z")

</div>