# Unable to create index in ElasticSearch from Filebeat - \> Logstash

**URL:** <https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-from-filebeat-logstash/169983>\
**Category:** Logstash\
**Created:** [February 26, 2019, 11:07am UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-from-filebeat-logstash/169983 "2019-02-26T11:07:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abinaya](https://avatars.discourse-cdn.com/v4/letter/a/b19c9b/32.png) [@Abinaya](https://discuss.elastic.co/u/Abinaya)\
**Post date:** [February 26, 2019, 11:07am UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-from-filebeat-logstash/169983/1 "2019-02-26T11:07:01Z")

</div>

Hi,

I am trying to read a sample apache log file from file beat and push it to Logstash. I am not seeing any error in debug mode. Index not being created in ES.

Logstash.conf file

input {  
beats {  
port =\> "5044"  
}  
}  
filter {  
grok {  
match =\> { "message" =\> "%{COMBINEDAPACHELOG}"}  
}  
geoip {  
source =\> "clientip"  
}  
}  
output {  
elasticsearch {  
hosts =\> ["localhost:9200"]  
}  
}

logstash in debug mode

logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}  
[2019-02-26T16:36:19,790][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config\_file=\>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}  
[2019-02-26T16:36:19,794][DEBUG][logstash.agent] Converging pipelines state {:actions\_count=\>0}  
[2019-02-26T16:36:20,862][DEBUG][logstash.instrument.periodicpoller.cgroup] One or more required cgroup files or directories not found: /proc/self/cgroup, /sys/fs/cgroup/cpuacct, /sys/fs/cgroup/cpu  
[2019-02-26T16:36:22,357][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=\>"ParNew"}  
[2019-02-26T16:36:22,358][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=\>"ConcurrentMarkSweep"}  
[2019-02-26T16:36:22,780][DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=\>["C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/benchmark.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/cpdump", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/dependencies-report", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ingest-convert.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}  
[2019-02-26T16:36:22,784][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config\_file=\>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}  
[2019-02-26T16:36:22,795][DEBUG][logstash.agent] Converging pipelines state {:actions\_count=\>0}  
[2019-02-26T16:36:23,361][DEBUG][logstash.pipeline] Pushing flush onto pipeline {:pipeline\_id=\>"main", :thread=\>"#\<Thread:0x1bb488f5 sleep\>"}  
[2019-02-26T16:36:25,785][DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=\>["C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/benchmark.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/cpdump", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/dependencies-report", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ingest-convert.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-keystore.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-plugin.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash.lib.sh", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqcheck", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/pqrepair", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ruby", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/setup.bat", "C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/system-install"]}  
[2019-02-26T16:36:25,787][DEBUG][logstash.config.source.local.configpathloader] Reading config file {:config\_file=\>"C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/logstash-sample.conf"}  
[2019-02-26T16:36:25,798][DEBUG][logstash.agent] Converging pipelines state {:actions\_count=\>0}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [February 26, 2019, 1:07pm UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-from-filebeat-logstash/169983/2 "2019-02-26T13:07:21Z")

</div>

Are you absolutely certain that those are the contents of C:/ELK/logstash-6.5.2/logstash-6.5.2/bin/ **logstash-sample.conf**

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 26, 2019, 1:07pm UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elasticsearch-from-filebeat-logstash/169983/3 "2019-03-26T13:07:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.