# Why ELK does not receive any data from Filebeat?

**URL:** <https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683>\
**Category:** Elasticsearch\
**Created:** [May 5, 2019, 5:12pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683 "2019-05-05T17:12:04Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![zenimagine](https://avatars.discourse-cdn.com/v4/letter/z/3bc359/32.png) [@zenimagine](https://discuss.elastic.co/u/zenimagine)\
**Post date:** [May 5, 2019, 5:12pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683/1 "2019-05-05T17:12:04Z")

</div>

I have an Ubuntu 18.04 server with ELK installed and configured on it.

For ELK I followed this tutorial :

> **[How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu...](https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-18-04)**
>
> In this tutorial, we will go over the installation of the Elastic Stack on an Ubuntu 18.04 server. You will learn how to install all the components of the Elastic Stack (including Filebeat, a Beat used for forwarding and centralizing logs and files)...

When I go to Kibana, there is no data. Yet my configuration looks correct. Do you have an idea ?

`ubuntu@monitoring-example-com:~$ sudo filebeat modules enable system` :

```
Enabled system

```

`ubuntu@monitoring-example-com:~$ sudo filebeat setup --template -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'` :

```
Index setup complete.

```

`ubuntu@monitoring-example-com:~$ sudo filebeat setup -e -E output.logstash.enabled=false -E output.elasticsearch.hosts=['localhost:9200'] -E setup.kibana.host=localhost:5601` :

[https://pastebin.com/2nhaPwJV](https://pastebin.com/2nhaPwJV)

ubuntu@monitoring-example-com:~$ sudo systemctl start filebeat

`ubuntu@monitoring-example-com:~$ sudo systemctl enable filebeat` :

```
Synchronizing state of filebeat.service with SysV service script with /lib/systemd/systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install enable filebeat

```

`ubuntu@monitoring-example-com:~$ curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'` :

```
{
  "took" : 1,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 0,
      "relation" : "eq"
    },
    "max_score" : null,
    "hits" : []
  }
}
```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 5, 2019, 11:05pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683/2 "2019-05-05T23:05:28Z")

</div>

What does the output from `_cat/indices?v` show?

---

<div class="post-metadata">

**Author:** ![zenimagine](https://avatars.discourse-cdn.com/v4/letter/z/3bc359/32.png) [@zenimagine](https://discuss.elastic.co/u/zenimagine)\
**Post date:** [May 5, 2019, 11:19pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683/3 "2019-05-05T23:19:18Z")

</div>

I just found the problem. This is an error I made :

```
#output.elasticsearch:
  # Array of hosts to connect to.
  #hosts: ["localhost:9200"]

```

he miss # in front of `output.elasticsearch:`

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 5, 2019, 11:20pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683/4 "2019-05-05T23:20:11Z")

</div>

Thanks for sharing your solution! 😃

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 2, 2019, 11:20pm UTC](https://discuss.elastic.co/t/why-elk-does-not-receive-any-data-from-filebeat/179683/5 "2019-06-02T23:20:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.