# Why I can't transfer my log to elasticsearch by filebeat?

**URL:** <https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488>\
**Category:** Elasticsearch\
**Created:** [February 12, 2018, 2:56pm UTC](https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488 "2018-02-12T14:56:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vincnetwang0736](https://avatars.discourse-cdn.com/v4/letter/v/b782af/32.png) [@vincnetwang0736](https://discuss.elastic.co/u/vincnetwang0736)\
**Post date:** [February 12, 2018, 2:56pm UTC](https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488/1 "2018-02-12T14:56:49Z")

</div>

0  
down vote  
favorite

I have installed elastciseatch-6.1.1,logstash-6.1.1 on server and filebeat-6.1.1.  
My web server on client is nginx.And I saved my log files at path likes "/usr/local/nginx/xxxx.xx/uploads/logs" and the owner of that files is "www-data":  
 ![%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20180212222516](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f338f1a4342a3bbc7aa6afc9ca45ba22a523013c.png)

But When all elk packages are running correctly,elasticsearch can't get any log info unless I use vim on one log file and I just "wq" it without any actually modify. I/m confusing with this problem.  
elasticsearch filebeat

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 12, 2018, 2:56pm UTC](https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488/2 "2018-03-12T14:56:56Z")

</div>

Closed on March 12, 2018, 2:56pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.