title: filebeat doesn't forward to logstash
body: <p>I have configured filebeat as it is descripted at elastic.co</p>
  
  <p>The Problem is that when I add a new log-file the data is not uploaded to logstash. What can be the problem?
  I already tried different config ways but it didn't work at all. </p>
  
  <pre><code>################### Filebeat Configuration Example #########################
  
  ############################# Filebeat ######################################
  filebeat:
    # List of prospectors to fetch data.
    prospectors:
      -
        paths:
          - /Users/apps/*.log
  
        input_type: log
  
  
  ###############################################################################
  ############################# Libbeat Config ##################################
  # Base config file used by all other beats for using libbeat features
  
  ############################# Output ##########################################
  
  output:
    elasticsearch:
      hosts: ["localhost:9200"]
      worker: 1
  
      index: "filebeat"
  
      template:
       path: "filebeat.template.json"
  
    ### Logstash as output
    logstash:
      # The Logstash hosts
      hosts: ["localhost:5044"]
  
      index: filebeat
  
  
  
  ############################# Shipper #########################################
  
  ############################# Logging #########################################
  
  # There are three options for the log ouput: syslog, file, stderr.
  # Under Windos systems, the log files are per default sent to the file output,
  # under all other system per default to syslog.
  logging:
  
    files:
  
      rotateeverybytes: 10485760 # = 10MB
  </code></pre>
  
  <p>Config in logstash.conf:</p>
  
  <pre><code>input {
    beats {
      port =&gt; 5044
    }
  }
  
  output {
    elasticsearch {
      hosts =&gt; ["localhost:9200"]
      manage_template =&gt; true
      index =&gt; "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
      document_type =&gt; "%{[@metadata][type]}"
      document_id =&gt; "%{fingerprint}"
    }
  }
  </code></pre>