# Unable to connect the logtash

**URL:** <https://discuss.elastic.co/t/unable-to-connect-the-logtash/383628>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring, elastic-stack-security\
**Created:** [November 24, 2025, 6:38pm UTC](https://discuss.elastic.co/t/unable-to-connect-the-logtash/383628 "2025-11-24T18:38:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kyu\_Kazami](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kyu_kazami/32/145886_2.png) [@Kyu\_Kazami](https://discuss.elastic.co/u/Kyu_Kazami)\
**Post date:** [November 24, 2025, 6:38pm UTC](https://discuss.elastic.co/t/unable-to-connect-the-logtash/383628/1 "2025-11-24T18:38:35Z")

</div>

Hi, im kinda new in this ELK Stack things, i’do have a problem with connectiong nginx to logstash =\> ES. the ELK stack is perfectly run but when im running the logstash to connect logstash and ES it just like this

`kyukazami@elkstack:/usr/share/logstash/bin$ ./logstash -f "/etc/logstash/conf.`  
`d/nginx.conf"`  
`Using bundled JDK: /usr/share/logstash/jdk`

and nothing happen, but i’do realize when im going to server:5601 i can’t access it. here is my /etc/logstash/conf.d/nginx.conf

```auto
input {
file {
path => ["/var/log/nginx/access.log", "/var/log/nginx/error.log"]
type => "nginx"
}
}

filter {
grok {
match => { "message" => "%{COMBINEDAPACHELOG}+%{GREEDYDATA:extra_fields}" }
overwrite => ["message"]
}

mutate {
    convert => { "response" => "integer" }
    convert => { "bytes" => "integer" }
    convert => { "responsetime" => "float" }
}

geoip {
    source => "clientip"
    target => "geoip"
    add_tag => ["nginx-geoip"]
}

date {
    match => ["timestamp", "dd/MM/YYYY:HH:mm:ss Z"]
    remove_field => ["timestamp"]
}

useragent {
    source => "agent"
}

}

output {
elasticsearch {
hosts => ["xxxxx:9200"]
index => "nginx-%{+YYYY.MM.dd}"
document_type => "nginx_logs"
}
}

```