Using filebeat sending logs to logstash?

Now output says that the source file is /var/log/elasticsearch/escluster.log and type is exceptions, which is correct according to your filebeat config.