title: Filebeat logs to Logstash connection
body: <p>No matter what I do, I cannot seem to make filebeat forward logs to logstash as a deb service(/etc/init.d/logstash start). When I run the logstash executable in my terminal pointing to the config file this connection seems to work. There has to be something slightly off with my configuration or understanding of how to run logstash as a detached service.</p>
  
  <p><strong>Environment</strong></p>
  
  <p>2 AWS hosted ubuntu servers, no security group and/nacls blocking the connection</p>
  
  <p>Filebeats installed on my application servers</p>
  
  <ul>
  <li>filebeat.yml passes configtest</li>
  <li>filebeat stays running as a service</li>
  </ul>
  
  <p>Logstash installed as deb on a master server</p>
  
  <ul>
  <li>logstash.conf passes config test and is saved in /etc/logstash/conf.d </li>
  <li>Elasticsearch is commented out in logstash.conf</li>
  <li>logstash is running as a service</li>
  <li>logstash.conf Permissions-> -rw-rw-rw- logstash logstash logconsolidated.log</li>
  <li>No cert/ssl/tls keys/encryption are being used at this time</li>
  </ul>
  
  <p><strong>Filebeat config</strong></p>
  
  <pre><code>filebeat:
   # List of prospectors to fetch data.
        prospectors:
            paths:
              - /opt/somedirectoy/test/log/mylog.log
            input_type: log
    ### Logstash as output
    logstash:
      # The Logstash hosts
      hosts: ["10.10.10.10:5044"]
  </code></pre>
  
  <p><strong>Logstash.conf</strong></p>
  
  <pre><code>input {
    beats {
      port =&gt; 5044
    }
  }
  
  output {
    file {
      path =&gt; "/opt/logstash/output/log-consolidated.log"
      }
    }
  </code></pre>