# The index is not created and no log is recorded
**URL:** https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286
**Category:** Elasticsearch
**Created:** [April 4, 2016, 6:53pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286 "2016-04-04T18:53:19Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)
#### Post date: [April 4, 2016, 6:53pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/1 "2016-04-04T18:53:19Z")
Hello,
The indices were being created normally. And one day it stopped.
The Elastic search create the index for the topbeat but do not create for the Filebeat.
In Logstash's log everything seems to work properly and there is no log from elasticsearch.
I've updated every ptoducts, but still not working.
Is there a way to configure on Elasticsearch debug log?
I really do not know whatelse to do.
logstash 2.3.0
elasticsearch Version: 2.3.0, Build: 8371be8/2016-03-29T07:54:48Z, JVM: 1.7.0\_80
filebeat version 1.2.0 (amd64)
Thanks in advance!
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 4, 2016, 11:30pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/2 "2016-04-04T23:30:49Z")
Is ES running?
Have you tried running LS with `--debug`?
---
### Author:  [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)
#### Post date: [April 5, 2016, 10:28am UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/3 "2016-04-05T10:28:58Z")
Yes, the ES is running.
I started the LS with --debug, it receives the documents and seems work fine.
What I could notice is the port of Elasticsearch (9200). After a while lots of TIME\_WAIT come.
---
### Author:  [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)
#### Post date: [April 6, 2016, 9:33am UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/4 "2016-04-06T09:33:05Z")
Any idea guys?
I really need help. The whole Filebeat is not working with elasticsearch.
I have everything stopped.
Thanks in advance.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 6, 2016, 9:37pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/5 "2016-04-06T21:37:13Z")
It might be better if you create a thread in the Filebeat category with some more info.
---
### Author:  [@rafaellamuniz](https://discuss.elastic.co/u/rafaellamuniz)
#### Post date: [April 8, 2016, 1:08pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/6 "2016-04-08T13:08:33Z")
The problem was that the format log has been changed without my Knowledge.
Before:
[4/7/16 12:39:39:813 **CET**] 00000249 SystemOut O lookupName: java:comp/env/ejb/StructureInformation
After:
[4/7/16 12:39:39:813 **CEST**] 00000249 SystemOut O lookupName: java:comp/env/ejb/StructureInformation
So, I changed the filter to recognize this new format as bellow.
Before:
match =\> ["message", "([%{DATESTAMP:timestamp} **(\S{3}))\S** %{WORD:thread\_id} %{WORD:short\_name}\s\*%{WORD:event\_type}\s\*%{GREEDYDATA:m
essage\_desc}"]
After:
match =\> ["message", "([%{DATESTAMP:timestamp} **(\S)\*)]** %{WORD:thread\_id} %{WORD:Short\_name}\s\*%{WORD:event\_ty
pe}\s\*%{GREEDYDATA:message\_desc}"]
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:01pm UTC](https://discuss.elastic.co/t/the-index-is-not-created-and-no-log-is-recorded/46286/7 "2017-07-05T23:01:11Z")