# What is wrong with my logstash conf?

**URL:** <https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577>\
**Category:** Logstash\
**Created:** [January 27, 2022, 11:55am UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577 "2022-01-27T11:55:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [January 27, 2022, 11:55am UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577/1 "2022-01-27T11:55:34Z")

</div>

Hello,  
I installed a new Windows instance that is running parrallel to my Linux Cluster.

The Problem:  
The following .conf file works perfectly on Linux, but not on Windows:

```auto
input {
  file {
        path => ["C:\Elastic-Stack\logstash-tutorial.log"]
        start_position => "beginning"
  }
}

output {
  elasticsearch {
    hosts => "http://IP:9200"
    user => 'user'
    password => pass
    index => "logstash-%{+yyyy.MM.dd}-tutorial.data"
    }
}

```

My Linux VM shows the index seconds after starting logstash(NOTE: The path is a different one, of course) but my windows kibana server does not receive any data at all. I tried multiple files but the problem should be somewhere else. I hope.

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [January 27, 2022, 12:00pm UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577/2 "2022-01-27T12:00:24Z")

</div>

> [@smam](#):
>
> `path => ["C:\Elastic-Stack\logstash-tutorial.log"]`

Use forward slashes in your input configuration for Windows.

```auto
path => ["C:/Elastic-Stack/logstash-tutorial.log"]

```

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [January 27, 2022, 12:10pm UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577/3 "2022-01-27T12:10:34Z")

</div>

Somestimes it can be as easy as that.  
Thank you very much.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 24, 2022, 12:10pm UTC](https://discuss.elastic.co/t/what-is-wrong-with-my-logstash-conf/295577/4 "2022-02-24T12:10:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.