# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=446 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 447 --- ## [Truncated log line](https://discuss.elastic.co/t/truncated-log-line/133543)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 3\ **Last updated:** [June 6, 2018, 12:07pm UTC](https://discuss.elastic.co/t/truncated-log-line/133543 "2018-06-06T12:07:54Z")
Hi using Filebeat 6.2.2 and logrotate. Logrotate is setup to rotate every 100MB. When rotation happens we see that the last entry durring rotation gets cut in half. So some of the bytes of the line are in the old file … --- ## [Running Filebeat on Azure App Service annoying exception](https://discuss.elastic.co/t/running-filebeat-on-azure-app-service-annoying-exception/134409)
**Author:** [@Alexander\_Sealook](https://discuss.elastic.co/u/Alexander_Sealook)\ **Replies:** 5\ **Last updated:** [June 6, 2018, 11:54am UTC](https://discuss.elastic.co/t/running-filebeat-on-azure-app-service-annoying-exception/134409 "2018-06-06T11:54:23Z")
Hey, I am running Filebeat as a webjob on Azure App Service and it's working fine, but I am annoyed with the exceptions it is constantly writing to the logs: 2018-06-04T11:15:16.433Z ERROR process/process.go:454 Error … --- ## [USE Filebeat 6.2 can't work with kafka](https://discuss.elastic.co/t/use-filebeat-6-2-cant-work-with-kafka/134526)
**Author:** [@richard2017](https://discuss.elastic.co/u/richard2017)\ **Replies:** 5\ **Last updated:** [June 6, 2018, 5:44am UTC](https://discuss.elastic.co/t/use-filebeat-6-2-cant-work-with-kafka/134526 "2018-06-06T05:44:14Z")
I installed Filebeat 6.2 ,and want to use filebeat modules , filebeat -\>kafka 0.10.1-\>logstash -\> ES. filebeat.yml: output.kafka: enabled: true hosts: \["10.2.33.33:9092","10.2.33.34:9092","10.2.33.35:9092"\] topic: s… --- ## [No data to display for the selected metrics](https://discuss.elastic.co/t/no-data-to-display-for-the-selected-metrics/134679)
**Author:** [@Einbasaharan](https://discuss.elastic.co/u/Einbasaharan)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 8:22pm UTC](https://discuss.elastic.co/t/no-data-to-display-for-the-selected-metrics/134679 "2018-06-05T20:22:39Z")
Have installed metricbeat on windows 2012 and windows 2016,Getting Error on Windows 2012 Platform Processes By Memory \[Metricbeat System\] , Top Processes By CPU \[Metricbeat System\] and Disk IO (Bytes) \[Metricbeat Syst… --- ## [Winlogbeat not capturing specific event id's in windows server 2012](https://discuss.elastic.co/t/winlogbeat-not-capturing-specific-event-ids-in-windows-server-2012/134540)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 7:17pm UTC](https://discuss.elastic.co/t/winlogbeat-not-capturing-specific-event-ids-in-windows-server-2012/134540 "2018-06-05T19:17:19Z")
Hi All, I have installed winlogbeat 5.6.5 version in the windows server 2012 machine and to capture only specific event id's from the machine, I have given the event id's in the winlogbeat.yml file winlogbeat.event\_log… --- ## [IP address in filebeat](https://discuss.elastic.co/t/ip-address-in-filebeat/134358)
**Author:** [@gbmzjy](https://discuss.elastic.co/u/gbmzjy)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 6:21pm UTC](https://discuss.elastic.co/t/ip-address-in-filebeat/134358 "2018-06-05T18:21:06Z")
Hi, I am using filebeat in the hosts. The filebeats will forward log files to elastic search server. In order to know where the logs come from the server side, I need filebeat to append IP address to the log before forwa… --- ## [Strange heartbeat errors](https://discuss.elastic.co/t/strange-heartbeat-errors/134351)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 6\ **Last updated:** [June 5, 2018, 4:10pm UTC](https://discuss.elastic.co/t/strange-heartbeat-errors/134351 "2018-06-05T16:10:55Z")
Hi, I am using ELK 6.2.2 with all Beats. When I use single node and run heartbeat, it does not come with any errors.. But when I run heartbeats with cluster, I am seeing long list of logs and the heartbeats stops. N… --- ## [Filebeat adding incorrect path to multiple prospectors?](https://discuss.elastic.co/t/filebeat-adding-incorrect-path-to-multiple-prospectors/134449)
**Author:** [@magdieldominguez](https://discuss.elastic.co/u/magdieldominguez)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 2:41pm UTC](https://discuss.elastic.co/t/filebeat-adding-incorrect-path-to-multiple-prospectors/134449 "2018-06-05T14:41:33Z")
Hi I just started using filebeat I am using Filebeat - 6.2.4. I am running this on a redhat 5 linux box and I am trying to send around 15 log files into elasticsearch. Not sure where I am going wrong in specifying the pa… --- ## [Field \[@timestamp\] of type \[keyword\] does not support custom time zones](https://discuss.elastic.co/t/field-timestamp-of-type-keyword-does-not-support-custom-time-zones/134231)
**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 1:43pm UTC](https://discuss.elastic.co/t/field-timestamp-of-type-keyword-does-not-support-custom-time-zones/134231 "2018-06-05T13:43:47Z")
Once I set packetbeat to use fields.yml I get following exception in elastic logs and on kibana dashboard. Caused by: java.lang.IllegalArgumentException: Field \[@timestamp\] of type \[keyword\] does not support custom time… --- ## [Kibana Cloud and Syslog](https://discuss.elastic.co/t/kibana-cloud-and-syslog/134486)
**Author:** [@Reverse\_Flash\_DC](https://discuss.elastic.co/u/Reverse_Flash_DC)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 10:58am UTC](https://discuss.elastic.co/t/kibana-cloud-and-syslog/134486 "2018-06-05T10:58:26Z")
How can I relate the syslog of my Cisco firewall with my Kibana in my cloud? I want to monitor the events of my firewall --- ## [How to connect postgresql with kibana via metricbeat](https://discuss.elastic.co/t/how-to-connect-postgresql-with-kibana-via-metricbeat/134557)
**Author:** [@Aslam](https://discuss.elastic.co/u/Aslam)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 10:12am UTC](https://discuss.elastic.co/t/how-to-connect-postgresql-with-kibana-via-metricbeat/134557 "2018-06-05T10:12:31Z")
Hello, I have tried to access data from postgresql and visualise in kibana through metricbeat. I couldn't establish the connection properly. Can anyone help me for this issue ? I configured and enabled the postgresql m… --- ## [./filebeat modules list failure with rpm package](https://discuss.elastic.co/t/filebeat-modules-list-failure-with-rpm-package/134509)
**Author:** [@hjfeng1988](https://discuss.elastic.co/u/hjfeng1988)\ **Replies:** 1\ **Last updated:** [June 5, 2018, 9:40am UTC](https://discuss.elastic.co/t/filebeat-modules-list-failure-with-rpm-package/134509 "2018-06-05T09:40:19Z")
my filebeat was install under yum on centos7, I run /usr/share/filebeat/bin/filebeat modules list,it tell me below. Error initializing beat: error loading config file: stat filebeat.yml: no such file or directory th… --- ## [Filebeat: Error on Windows\* with SSL Certificates](https://discuss.elastic.co/t/filebeat-error-on-windows-with-ssl-certificates/134559)
**Author:** [@SimonSays4223](https://discuss.elastic.co/u/SimonSays4223)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 9:24am UTC](https://discuss.elastic.co/t/filebeat-error-on-windows-with-ssl-certificates/134559 "2018-06-05T09:24:05Z")
Hello @all, I'm trying to configure filebeat on a Win7 and Win10 machine with SSL-Certificates. After configuring it as described: output.logstash hosts: \["mylogstaship:myport"\] ssl.certificate\_authorities… --- ## [Problem with filebeat.yml](https://discuss.elastic.co/t/problem-with-filebeat-yml/134144)
**Author:** [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)\ **Replies:** 12\ **Last updated:** [June 4, 2018, 3:30am UTC](https://discuss.elastic.co/t/problem-with-filebeat-yml/134144 "2018-06-04T03:30:04Z")
hi there, I am trying to send logs from filebeat to logstash.As stated in the yml file i have commented the elasticsearch output and uncommented the one for logstash but i happen to get this error: PS C:\\Program Files\\… --- ## [Filebeat to count events picked up before sending to elasticsearch or logstash](https://discuss.elastic.co/t/filebeat-to-count-events-picked-up-before-sending-to-elasticsearch-or-logstash/133631)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 5\ **Last updated:** [June 5, 2018, 3:05am UTC](https://discuss.elastic.co/t/filebeat-to-count-events-picked-up-before-sending-to-elasticsearch-or-logstash/133631 "2018-06-05T03:05:35Z")
Hello Is it possible? Scenario: We have a file that is being picked up by filebeat. The prospectors splits up the content of the file into multiple events. Now, how do we capture the total events before it passes to o… --- ## [Requirements for sending logs from the Domain Controller](https://discuss.elastic.co/t/requirements-for-sending-logs-from-the-domain-controller/134322)
**Author:** [@Reverse\_Flash\_DC](https://discuss.elastic.co/u/Reverse_Flash_DC)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 7:33pm UTC](https://discuss.elastic.co/t/requirements-for-sending-logs-from-the-domain-controller/134322 "2018-06-04T19:33:03Z")
Is it possible to send logs to my cloud from a Domain Controller? What I need? --- ## [Filebeat Exception - Cannot Get Text on a Start Object](https://discuss.elastic.co/t/filebeat-exception-cannot-get-text-on-a-start-object/134258)
**Author:** [@tarpanpathak](https://discuss.elastic.co/u/tarpanpathak)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 6:57pm UTC](https://discuss.elastic.co/t/filebeat-exception-cannot-get-text-on-a-start-object/134258 "2018-06-04T18:57:56Z")
This is my first post so hello. I'm trying to debug a Filebeat exception error but not making much progress. We are running Filebeat through a Helm chart and without changes to the environment are seeing the following … --- ## [Running test-suite for postgresql module](https://discuss.elastic.co/t/running-test-suite-for-postgresql-module/134105)
**Author:** [@zinefer](https://discuss.elastic.co/u/zinefer)\ **Replies:** 4\ **Last updated:** [June 4, 2018, 5:23pm UTC](https://discuss.elastic.co/t/running-test-suite-for-postgresql-module/134105 "2018-06-04T17:23:15Z")
I'm getting an error when I try to run integration tests for postgresql... $ MODULE=postgresql make run-module TESTING\_ENVIRONMENT=snapshot ES\_BEATS=.. docker-compose -p metricbeatf1c1aec6a75b69c6e95228873a2b9e3f66c240… --- ## [Filebeat kubernets api metadata isnt optional](https://discuss.elastic.co/t/filebeat-kubernets-api-metadata-isnt-optional/134273)
**Author:** [@shane99a](https://discuss.elastic.co/u/shane99a)\ **Replies:** 2\ **Last updated:** [June 4, 2018, 2:47pm UTC](https://discuss.elastic.co/t/filebeat-kubernets-api-metadata-isnt-optional/134273 "2018-06-04T14:47:16Z")
So I decided to test out what happens if filebeat could not access the k8s API, by giving it no reading access to the API, hoping that filebeat will send the logs without kubernetes metadata. But I observed that it will … --- ## [Postgresql logs are not seen](https://discuss.elastic.co/t/postgresql-logs-are-not-seen/134356)
**Author:** [@vishnuduttpv](https://discuss.elastic.co/u/vishnuduttpv)\ **Replies:** 3\ **Last updated:** [June 4, 2018, 12:37pm UTC](https://discuss.elastic.co/t/postgresql-logs-are-not-seen/134356 "2018-06-04T12:37:08Z")
Hi, Following is my platform, OS - CentOS 7.4 ES - 6.2 LS - 6.2 Kibana - 6.2 Filebeat - 6.2 Following is my postgresql module configuration file, \> - module: postgresql \> # All logs \> log: \> enabled: t… --- ## [Filebeat does not send data to logstash](https://discuss.elastic.co/t/filebeat-does-not-send-data-to-logstash/134338)
**Author:** [@Kavita\_Sidar](https://discuss.elastic.co/u/Kavita_Sidar)\ **Replies:** 9\ **Last updated:** [June 4, 2018, 10:19am UTC](https://discuss.elastic.co/t/filebeat-does-not-send-data-to-logstash/134338 "2018-06-04T10:19:15Z")
I am new to filebeat and logstash and was trying to send log data from filebeat to logstash as per the documentation. But logstash does not disply any output. This is the filebeat.yml file: filebeat.prospectors: … --- ## [Filebeat automatically stops](https://discuss.elastic.co/t/filebeat-automatically-stops/134284)
**Author:** [@vschakka](https://discuss.elastic.co/u/vschakka)\ **Replies:** 2\ **Last updated:** [June 4, 2018, 3:21am UTC](https://discuss.elastic.co/t/filebeat-automatically-stops/134284 "2018-06-04T03:21:17Z")
Hi, I am using 6.2.3 version filebeat. Issue is my filebeat service gets automatically down very frequently. But when ever i made it up it will crawl properly and log data into elasticsearch properly for certain durati… --- ## [Error No matching indices found: No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/error-no-matching-indices-found-no-indices-match-pattern-filebeat/133787)
**Author:** [@cro](https://discuss.elastic.co/u/cro)\ **Replies:** 4\ **Last updated:** [June 4, 2018, 3:12am UTC](https://discuss.elastic.co/t/error-no-matching-indices-found-no-indices-match-pattern-filebeat/133787 "2018-06-04T03:12:10Z")
Filebeat not creating an index. Any ideas? \_cat/indices \[58\] filebeat.yml ###################### Filebeat Configuration Example ######################### #=========================== Filebeat prospectors ===========… --- ## [Csv -\> filebeat -\> logstash not parsing?](https://discuss.elastic.co/t/csv-filebeat-logstash-not-parsing/134317)
**Author:** [@TestCandidate](https://discuss.elastic.co/u/TestCandidate)\ **Replies:** 1\ **Last updated:** [June 3, 2018, 3:59pm UTC](https://discuss.elastic.co/t/csv-filebeat-logstash-not-parsing/134317 "2018-06-03T15:59:21Z")
I have configured a server using elk stack with filebeat. In a folder, i have multiple CSV files. I have managed to get filebeat to read them using: paths: - /var/capture/dpi-tcp/\*.csv Now for logstash, I have … --- ## [Could I get DISKIO per PROCESS from metricbeat dashboard for kibana?](https://discuss.elastic.co/t/could-i-get-diskio-per-process-from-metricbeat-dashboard-for-kibana/134000)
**Author:** [@alantany](https://discuss.elastic.co/u/alantany)\ **Replies:** 4\ **Last updated:** [June 1, 2018, 6:04pm UTC](https://discuss.elastic.co/t/could-i-get-diskio-per-process-from-metricbeat-dashboard-for-kibana/134000 "2018-06-01T18:04:41Z")
Hello, Recently I tried the metricbeat,found it very nice,it provides a sample dashboards for kibada,so we can easily build up a dashboard for SYSTEM,but there is a pity that i can't find a table about DISKIO for per P… --- ## [Filebeat for Windows DNS log](https://discuss.elastic.co/t/filebeat-for-windows-dns-log/133905)
**Author:** [@Ludovic9](https://discuss.elastic.co/u/Ludovic9)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 5:35pm UTC](https://discuss.elastic.co/t/filebeat-for-windows-dns-log/133905 "2018-06-01T17:35:33Z")
Hi everyone, I'm writing this topic to have some help, advices, tips about how to send correctly the dns logs on a windows domain controller. I'm a beginner in ELK stack and I have to ship log of DNS role (dhcp log late… --- ## [Filebeat Index Issue - template pattern / name](https://discuss.elastic.co/t/filebeat-index-issue-template-pattern-name/133738)
**Author:** [@docmur](https://discuss.elastic.co/u/docmur)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-index-issue-template-pattern-name/133738 "2018-06-01T14:10:04Z")
Hey Guys I'm trying to set my index, in filebeat, this is my current config: output.elasticsearch: # Array of hosts to connect to. hosts: \["192.168.1.199:9200"\] setup.template.name: "desktop" setup.template.pat… --- ## [Where Metricbeat stores collected data](https://discuss.elastic.co/t/where-metricbeat-stores-collected-data/134172)
**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 1:32pm UTC](https://discuss.elastic.co/t/where-metricbeat-stores-collected-data/134172 "2018-06-01T13:32:21Z")
Hello, while I was testing functionalists of Metricbeat following question came up on my mind. If the output is unreachable, can this cause partition overflow? Based on performed tests my conclusion was that data is sto… --- ## [Metricbeat not indexing data to Elasticsearch](https://discuss.elastic.co/t/metricbeat-not-indexing-data-to-elasticsearch/134135)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 1:25pm UTC](https://discuss.elastic.co/t/metricbeat-not-indexing-data-to-elasticsearch/134135 "2018-06-01T13:25:21Z")
Hi, I have got below JSON in metricbeat logs. "@timestamp": "2018-06-01T04:00:33.851Z", "@metadata": { "beat": "metricbeat", "type": "doc", "version": "6.3.0" }, "fields": { "app\_id": "aaa", "type": "inframetr… --- ## [How to make charts on grafana from "counts" to "counts per second"?](https://discuss.elastic.co/t/how-to-make-charts-on-grafana-from-counts-to-counts-per-second/133604)
**Author:** [@WanLi\_Chen](https://discuss.elastic.co/u/WanLi_Chen)\ **Replies:** 1\ **Last updated:** [June 1, 2018, 12:28pm UTC](https://discuss.elastic.co/t/how-to-make-charts-on-grafana-from-counts-to-counts-per-second/133604 "2018-06-01T12:28:15Z")
Hi \*, Sounds like a dumb question :smiley: I've made charts in grafana with Logstash backed-end, they show a number of counts in that time range, NOT a rating sense like QPS(query per second)... what is the way to a… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=445) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=447)