# Winlogbeat 8.2.3, loadbalance: true
**URL:** https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212
**Category:** Beats
**Tags:** winlogbeat
**Created:** [August 2, 2022, 11:48am UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212 "2022-08-02T11:48:16Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Helmut](https://discuss.elastic.co/u/Helmut)
#### Post date: [August 2, 2022, 11:48am UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/1 "2022-08-02T11:48:16Z")
Hi,
in winlogbeat.yaml I have:
```auto
output.logstash:
hosts: ["logstashA:5044", "logstashB:5044"]
loadbalance: true
```
When either of those hosts is down the other one also does not get events forwarded anymore. Is this a misconfiguration on my side?
Thank you!
---
### Author:  [@rugenl](https://discuss.elastic.co/u/rugenl)
#### Post date: [August 2, 2022, 4:13pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/2 "2022-08-02T16:13:30Z")
Check the logs. Does it send to both when both are up? Did it work on prior versions?
That matches our config.
During the problem, test from your winlogbeat host with telnet, maybe whatever whatever causes one to be down is really causing both to be down.
---
### Author:  [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)
#### Post date: [August 2, 2022, 4:34pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/3 "2022-08-02T16:34:17Z")
@rugenl is right, it should be sending data to the host that is up.
Make sure at least one host is up, check Winglobeat and Logstash logs to make sure they're both working correctly.
You should see log errors regarding the host that is down on Winlogbeat
---
### Author:  [@Helmut](https://discuss.elastic.co/u/Helmut)
#### Post date: [August 2, 2022, 7:24pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/4 "2022-08-02T19:24:40Z")
I didn't test previous versions yet as this setup ran fine for 2 months.
hosts: ["logstash:5044", "localhost:5044"]
#hosts: ["localhost:5044"]
loadbalance: true
ELK@logstash is up but cannot process indices as the disk is full. With that config localhost:5044 does not show new messages anymore.
#hosts: ["logstash:5044", "localhost:5044"]
hosts: ["localhost:5044"]
#loadbalance: true
localhost:5044 immediately gets new messages.
Can I upload the logs somehow? Not sure what to look for, at least cannot see an obvious error.
---
### Author:  [@rugenl](https://discuss.elastic.co/u/rugenl)
#### Post date: [August 2, 2022, 7:27pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/5 "2022-08-02T19:27:15Z")
Fix the disk full problem.
---
### Author:  [@Helmut](https://discuss.elastic.co/u/Helmut)
#### Post date: [August 2, 2022, 7:31pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/6 "2022-08-02T19:31:40Z")
Yes, sure, will do so soon 😃 I was just wondering why localhost:5044 also stopped working.
---
### Author:  [@rugenl](https://discuss.elastic.co/u/rugenl)
#### Post date: [August 2, 2022, 7:45pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/7 "2022-08-02T19:45:21Z")
It doesn't matter where the logstash servers are, if they are sending to an elastic store that is full, they can't log. They might have persistent queues and could temporarily hold some data, but diagnosing broken systems beyond the obvious break is "an exercise left to the reader" :-}
---
### Author:  [@Helmut](https://discuss.elastic.co/u/Helmut)
#### Post date: [August 2, 2022, 7:59pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/8 "2022-08-02T19:59:23Z")
Just to make sure, disks at logstash:5044 are full, disks at localhost:5044 aren't but still localhost:5044 refuses to log / refuses to receive messages / does not get messages from Winlogbeat... I assumed that this is what a cluster is for, if one node fails others take over.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 30, 2022, 10:00pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212/9 "2022-08-30T22:00:17Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.