# Troubleshoot logstash. Find dropped events by logs **URL:** \ **Category:** Logstash\ **Created:** [October 2, 2019, 5:24pm UTC](https://discuss.elastic.co/t/troubleshoot-logstash-find-dropped-events-by-logs/202018 "2019-10-02T17:24:06Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![smerzlyakov](https://avatars.discourse-cdn.com/v4/letter/s/db5fbb/32.png) [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\ **Post date:** [October 2, 2019, 5:24pm UTC](https://discuss.elastic.co/t/troubleshoot-logstash-find-dropped-events-by-logs/202018/1 "2019-10-02T17:24:06Z")
Hello! Resently i noticed, that i doesn't get some Windows logs. I use WEF collector - Winlogbeat - Logstash - Elasticsearch. I checked WEF, messages were on it and it was ok, than i check winlogbeat logs - there is no errors or something strange. I even use debug mode. After it i check Logstash - i look for /var/log/logstash/logstash\* logs and doesn't find any problems. I look for healthcheck in Kibana: CPU were near 10% and Heap near 9 Gb from 30Gb for JAVA. Than i disable other logs, except winlogbeat. Before this action i has near 80 EPS for (winlogbeat-wef) pipe, after i have 3500 EPS! So, a lot of events simply dropped, as i understand and i coudnt find any logs about it. ![02](https://us1.discourse-cdn.com/elastic/original/3X/e/6/e668991570713c6aeb6f236c7df7c4aa5c275814.png) Here you can see overal EPS for Logstash ![08](https://us1.discourse-cdn.com/elastic/original/3X/2/5/25d7c6f2623d5af9c44aab156022bdddd0d4c264.png) It increases from 1000 to 4000 EPS. So, my questions are: 1. how to determine that something goes wrong with Logstash?Is there is some secret logs? 2. How can i know about queues? 3. How can i ckeck the health of every pipe? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 30, 2019, 5:24pm UTC](https://discuss.elastic.co/t/troubleshoot-logstash-find-dropped-events-by-logs/202018/2 "2019-10-30T17:24:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.