# Winglobeat via Logstash for a new indices
**URL:** https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764
**Category:** Logstash
**Created:** [September 7, 2017, 7:31pm UTC](https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764 "2017-09-07T19:31:10Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@hispeed](https://discuss.elastic.co/u/hispeed)
#### Post date: [September 7, 2017, 7:31pm UTC](https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764/1 "2017-09-07T19:31:10Z")
Hi,
I have installed the winlogbeat 5.4 on a Windows Server 2016 machine. The servie is started. I have configured the ELK server this server is also running fine.
> output.logstash:
>
> # The Logstash hosts
>
> hosts: ["192.168.0.13:5044"]
Now I want to have a new indices in Kibana. So I configured as above the output via logstash.
This is now my logstash input /output configuration. How I have to do that now with the output. It doesn't work at the moment. I don't recieve anything at Kibana. I have also already tried "if [type] == "winlogbeat" but this is also not working.
```
input {
# file {
# path => "/tmp/in.log"
# type => "logfile" # a type to identify those logs (will need this later)
# start_position => "beginning"
# }
syslog {
port => 5514
type => "syslog"
}
udp {
type => "pfsense"
port => 5140
}
beats {
type => "winlogbeat"
port => 5044
}
udp {
type => "syslog"
port => 5515
}
}
output {
# file {
# path => "/tmp/out.log"
# }
if [type] == "beats" {
elasticsearch {
hosts => "localhost:9200"
index => "logstash-eventlog-%{YYYY.mm.dd}" }
} else {
elasticsearch {
hosts => "localhost:9200"
index => "logstash-%{+YYYY.MM.dd}"
}
}
# if [@metadata][cthostmeta] == "ELKSTACK" {
# file {
# codec => rubydebug { metadata => true}
# path => "/tmp/logstash_out.log"
# }
# }
}
```
Thanks for any help with that.
Best Regards,
Marc
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 11, 2017, 8:49pm UTC](https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764/2 "2017-09-11T20:49:56Z")
Have you looked in the Logstash log? Is it receiving anything at all? You may have to increase the log level.
---
### Author:  [@hispeed](https://discuss.elastic.co/u/hispeed)
#### Post date: [September 12, 2017, 6:58am UTC](https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764/3 "2017-09-12T06:58:54Z")
Hi Magnus,
I have reopened this topic in Winlogbeat: [Can't create winlogbeat-\*](https://discuss.elastic.co/t/cant-create-winlogbeat/100113/8)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 10, 2017, 6:59am UTC](https://discuss.elastic.co/t/winglobeat-via-logstash-for-a-new-indices/99764/4 "2017-10-10T06:59:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.