# Unable to process the log files to logstash and to kibana

**URL:** https://discuss.elastic.co/t/unable-to-process-the-log-files-to-logstash-and-to-kibana/79896
**Category:** Beats
**Tags:** filebeat
**Created:** [March 24, 2017, 1:59pm UTC](https://discuss.elastic.co/t/unable-to-process-the-log-files-to-logstash-and-to-kibana/79896 "2017-03-24T13:59:46Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![aknraj](https://avatars.discourse-cdn.com/v4/letter/a/b4bc9f/32.png) [@aknraj](https://discuss.elastic.co/u/aknraj)
#### Post date: [March 24, 2017, 1:59pm UTC](https://discuss.elastic.co/t/unable-to-process-the-log-files-to-logstash-and-to-kibana/79896/1 "2017-03-24T13:59:46Z")

</div>

Hi All -

I am brand new to the Elasticsearch products and just trying to learn and getting my hands into it. I need your help / suggestions to overcome with the issues. Can you please guide me here pls?

Here is where I am - I managed to setup pipeline successfully, and able to load sample logs to logstash and to kibana. However, when I try to load the user logs from my custom application, the log is not consumed despite of the logstash running. Can you please help what could be the cause and next steps to consider?

Checks done from my side:

1. verified configurations in logstash.yml
2. verified configurations in filebeat.yml
3. pipleline conf. looks good
4. grok filter - i feel its ok but not sure. I am just trying to filter with "Started" keyword from the log

filter {  
grok {  
match =\> { "message" =\> "%{Started}"}  
}  
geoip {  
source =\> "clientip"  
}

Please refer to the sample log attached for the reference

 ![](https://us1.discourse-cdn.com/elastic/original/3X/d/6/d6c25a8818bf09e46faa7756e5725813d35e3d46.jpg)

Thanks in Advance for your help !

Regards  
Raj

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 25, 2017, 9:03pm UTC](https://discuss.elastic.co/t/unable-to-process-the-log-files-to-logstash-and-to-kibana/79896/2 "2017-03-25T21:03:20Z")

</div>

Can you share your filebeat config and filebeat logs? Which versions of the tools are you using?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 22, 2017, 9:03pm UTC](https://discuss.elastic.co/t/unable-to-process-the-log-files-to-logstash-and-to-kibana/79896/3 "2017-04-22T21:03:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.