# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=450 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 451 --- ## [Filebeat parsing ftp logs](https://discuss.elastic.co/t/filebeat-parsing-ftp-logs/132615)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 3\ **Last updated:** [May 22, 2018, 8:38am UTC](https://discuss.elastic.co/t/filebeat-parsing-ftp-logs/132615 "2018-05-22T08:38:01Z")
Hi All, Using filebeat agent for system and apache modules . the output directly forwarded to elasticsearch then getting the preconfigured kibana dashboards. Now i want to monitor the vsftpd daemon logs and parse it. I… --- ## [How quick can I get message that the system is down or shutting down?](https://discuss.elastic.co/t/how-quick-can-i-get-message-that-the-system-is-down-or-shutting-down/131368)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 5\ **Last updated:** [May 22, 2018, 8:24am UTC](https://discuss.elastic.co/t/how-quick-can-i-get-message-that-the-system-is-down-or-shutting-down/131368 "2018-05-22T08:24:33Z")
Hi, I am wondering how quick can I get the message that the remote system is down or shutting down. I am using 6.2.2 for all versions of ELK and Beats. Another question I have one system that is always "on" state (not… --- ## [Running external scripts from filebeat](https://discuss.elastic.co/t/running-external-scripts-from-filebeat/132665)
**Author:** [@vitaly\_r](https://discuss.elastic.co/u/vitaly_r)\ **Replies:** 1\ **Last updated:** [May 22, 2018, 7:46am UTC](https://discuss.elastic.co/t/running-external-scripts-from-filebeat/132665 "2018-05-22T07:46:19Z")
Hello, We are moving from Logstash to filebeat in our network. Everything went smoothly except one thing. We have use case when external (quite complicated) script shall be called in order to enrich the event sent to E… --- ## [Output.elasticsearch -\> console](https://discuss.elastic.co/t/output-elasticsearch-console/132708)
**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\ **Replies:** 2\ **Last updated:** [May 22, 2018, 4:29am UTC](https://discuss.elastic.co/t/output-elasticsearch-console/132708 "2018-05-22T04:29:59Z")
Guys, How do I set output.elasticsearch to console only, without elasticsearch hosts? If I do # hosts: \["localhost:9200"\] console: I get Exiting: error initializing publisher: missing required field accessing 'outp… --- ## [Metricbeat Kubernetes metadata processor](https://discuss.elastic.co/t/metricbeat-kubernetes-metadata-processor/130138)
**Author:** [@huskerdhf](https://discuss.elastic.co/u/huskerdhf)\ **Replies:** 3\ **Last updated:** [May 22, 2018, 3:35am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-metadata-processor/130138 "2018-05-22T03:35:18Z")
I'm wondering if anyone has come up with a working configuration for the add\_kubernetes\_metadata processor for Metricbeat. The documentation of this feature is quite sparse and so I've been struggling to find a working c… --- ## [Beat Event Field "IP datatype"](https://discuss.elastic.co/t/beat-event-field-ip-datatype/132619)
**Author:** [@ecc256](https://discuss.elastic.co/u/ecc256)\ **Replies:** 4\ **Last updated:** [May 22, 2018, 1:39am UTC](https://discuss.elastic.co/t/beat-event-field-ip-datatype/132619 "2018-05-22T01:39:46Z")
How do I add Beat Event Field with IP datatype? fields.Put("client.ip", net.ParseIP(clientIP)) adds string field... --- ## [Filebeat for RedHat 5.X](https://discuss.elastic.co/t/filebeat-for-redhat-5-x/132681)
**Author:** [@otc](https://discuss.elastic.co/u/otc)\ **Replies:** 2\ **Last updated:** [May 21, 2018, 10:20pm UTC](https://discuss.elastic.co/t/filebeat-for-redhat-5-x/132681 "2018-05-21T22:20:37Z")
Hello I am new to the use of Filebeat and have filebeat 5.5 set up on some of our redhat6 version servers and my understand was to use filebeat I needed at least RHEL6 or above but does anyone know if there is an older v… --- ## [Metricbeat and MySQL doesnt show results](https://discuss.elastic.co/t/metricbeat-and-mysql-doesnt-show-results/132009)
**Author:** [@Fernando\_Ramirez](https://discuss.elastic.co/u/Fernando_Ramirez)\ **Replies:** 2\ **Last updated:** [May 21, 2018, 9:25pm UTC](https://discuss.elastic.co/t/metricbeat-and-mysql-doesnt-show-results/132009 "2018-05-21T21:25:01Z")
Hi I run ELK in serverA. Kibana 5.6 Elasticsearch 5.6 Logstash 5.6 And, in a second serverB I have installed metricbeat 5.6 version to monitoring the MySQL database. metricbeat 5.6 mysql 5,7 The configuration fi… --- ## [Metricbeat does not install dashboards when running setup](https://discuss.elastic.co/t/metricbeat-does-not-install-dashboards-when-running-setup/132006)
**Author:** [@shanim](https://discuss.elastic.co/u/shanim)\ **Replies:** 7\ **Last updated:** [May 21, 2018, 5:29pm UTC](https://discuss.elastic.co/t/metricbeat-does-not-install-dashboards-when-running-setup/132006 "2018-05-21T17:29:02Z")
Metricbeat 6.2.3 reports a failure when attempting to install the kibana dashboards as the command expects the kibana/6 folder to be in the bin folder and not in the /usr/share/metricbeat/kibana folder. \[root@abcrd006 m… --- ## [Issue running Filebeat for the first time](https://discuss.elastic.co/t/issue-running-filebeat-for-the-first-time/132406)
**Author:** [@staticfrost](https://discuss.elastic.co/u/staticfrost)\ **Replies:** 17\ **Last updated:** [May 21, 2018, 3:38am UTC](https://discuss.elastic.co/t/issue-running-filebeat-for-the-first-time/132406 "2018-05-21T03:38:48Z")
During filebeat setup this error occurs: It's correct, I'm not using xpack. ERROR instance/beat.go:667 Exiting: 1 error: Error checking if xpack is available: 401 Unauthorized: {"Message":"Your request: '/\_xpack' … --- ## [HTTP error 401 in node: 401 Unauthorized](https://discuss.elastic.co/t/http-error-401-in-node-401-unauthorized/132532)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [May 18, 2018, 8:58pm UTC](https://discuss.elastic.co/t/http-error-401-in-node-401-unauthorized/132532 "2018-05-18T20:58:15Z")
Elastic 6.1.1 Metricbeat 6.2.2 I have metricbeat on an elasticsearch server and when I check kibana all I see are errors: HTTP error 401 in node: 401 Unauthorized When I view the logs I don't see anything to indicate… --- ## [Adding Envoy Proxy Module to Metricbeat](https://discuss.elastic.co/t/adding-envoy-proxy-module-to-metricbeat/132534)
**Author:** [@berfinsari](https://discuss.elastic.co/u/berfinsari)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 8:35pm UTC](https://discuss.elastic.co/t/adding-envoy-proxy-module-to-metricbeat/132534 "2018-05-18T20:35:53Z")
I am working on contributing a metricbeat module to Envoy Proxy. Is there a good piece of advice that you would give to me about the matter? --- ## [Java heap memory through elk- possible?](https://discuss.elastic.co/t/java-heap-memory-through-elk-possible/132528)
**Author:** [@Nithin\_Nk](https://discuss.elastic.co/u/Nithin_Nk)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 8:29pm UTC](https://discuss.elastic.co/t/java-heap-memory-through-elk-possible/132528 "2018-05-18T20:29:20Z")
Is there a way to monitor java heap memory???? --- ## [Is it mandatory to load the index template into Elasticsearch manually when using filebeat?](https://discuss.elastic.co/t/is-it-mandatory-to-load-the-index-template-into-elasticsearch-manually-when-using-filebeat/130668)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 5\ **Last updated:** [May 18, 2018, 5:54pm UTC](https://discuss.elastic.co/t/is-it-mandatory-to-load-the-index-template-into-elasticsearch-manually-when-using-filebeat/130668 "2018-05-18T17:54:21Z")
Hi, I am pretty new to Filebeat. I am using Logstash to send logs to another Logstash which will send logs to Elasticsearch(Logstash1 to Logstash2 to Elasticsearch). Now I am planning to replace Logstash1 with Filebeat.… --- ## [Metricbeat 6.x schema changed?](https://discuss.elastic.co/t/metricbeat-6-x-schema-changed/132494)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 2:59pm UTC](https://discuss.elastic.co/t/metricbeat-6-x-schema-changed/132494 "2018-05-18T14:59:51Z")
I have just upgraded metricbeat from version 5.6.8 to 6.2.4 and my metrics seem to be disappearing into thin air. My setup : meticbeat ==\> Logstash beats config below : input { beats { codec =\> plain { charset =\> … --- ## [How to ship data from one server to other using auditbeat](https://discuss.elastic.co/t/how-to-ship-data-from-one-server-to-other-using-auditbeat/132418)
**Author:** [@anji](https://discuss.elastic.co/u/anji)\ **Replies:** 2\ **Last updated:** [May 18, 2018, 8:39am UTC](https://discuss.elastic.co/t/how-to-ship-data-from-one-server-to-other-using-auditbeat/132418 "2018-05-18T08:39:58Z")
Hello Team, i am using Auditbeat on windows r2 server, my ELK stack setup is like Elasticsearch,kibana and logstash on same server with Auditbeat ( No clusturing ) . now i want logs from a different server using auditb… --- ## [Auditbeat impacting system performance](https://discuss.elastic.co/t/auditbeat-impacting-system-performance/131290)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 7\ **Last updated:** [May 18, 2018, 7:52am UTC](https://discuss.elastic.co/t/auditbeat-impacting-system-performance/131290 "2018-05-18T07:52:43Z")
Hi, could use some information on how auditbeat works so we can try and figure out where the limitation is that is dragging our system down. We are just using auditbeat to monitor 1 directory and 1 file (auditbeat.yml).… --- ## [Extracting redis keys data](https://discuss.elastic.co/t/extracting-redis-keys-data/132431)
**Author:** [@tigerofchina](https://discuss.elastic.co/u/tigerofchina)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 7:45am UTC](https://discuss.elastic.co/t/extracting-redis-keys-data/132431 "2018-05-18T07:45:51Z")
I can Extracting redis info. \[image\] I want to Extracting redis keys --- ## [Data transferred between FileBeat and Kafka](https://discuss.elastic.co/t/data-transferred-between-filebeat-and-kafka/132281)
**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 4:02am UTC](https://discuss.elastic.co/t/data-transferred-between-filebeat-and-kafka/132281 "2018-05-18T04:02:26Z")
Hi All, I have integrated Kafka in my ELK Stack , i just wanted to know whether filebeat send data to kafka in encrypted form or in PlainText format . how to view that data sent is in plaintext or encrypted form ? --- ## [Metricbeat CPU information is wrong](https://discuss.elastic.co/t/metricbeat-cpu-information-is-wrong/131390)
**Author:** [@lserranov](https://discuss.elastic.co/u/lserranov)\ **Replies:** 3\ **Last updated:** [May 17, 2018, 8:24pm UTC](https://discuss.elastic.co/t/metricbeat-cpu-information-is-wrong/131390 "2018-05-17T20:24:13Z")
Hello, I'm playing with ELK/Beats to learn and see what is out there. I deployed metricbeat and I can confirm that data is making its way to ELK (In particular I send info to logstash). I'm in kibana UI and I see infor… --- ## [Upgraded from 5.6.5 to 6.2.4, can't stream to kafka](https://discuss.elastic.co/t/upgraded-from-5-6-5-to-6-2-4-cant-stream-to-kafka/132131)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 2\ **Last updated:** [May 17, 2018, 7:52pm UTC](https://discuss.elastic.co/t/upgraded-from-5-6-5-to-6-2-4-cant-stream-to-kafka/132131 "2018-05-17T19:52:24Z")
After I upgraded from 5.6.5 to 6.2.4, I can't get my data into Kafka (1.0.0). Went through breaking changes but the only thing I could find is maybe the sarama library is broken against kafka 1.0.0? The error messages a… --- ## [Filebeat (Beats) install on Solaris](https://discuss.elastic.co/t/filebeat-beats-install-on-solaris/132294)
**Author:** [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\ **Replies:** 2\ **Last updated:** [May 17, 2018, 9:51am UTC](https://discuss.elastic.co/t/filebeat-beats-install-on-solaris/132294 "2018-05-17T09:51:26Z")
Hello, currently, is it filebeat and the others are supported by the Solaris system? Merci beaucoup ! --- ## [Process more than 3000 lines per record in filebeat](https://discuss.elastic.co/t/process-more-than-3000-lines-per-record-in-filebeat/131752)
**Author:** [@kerensu](https://discuss.elastic.co/u/kerensu)\ **Replies:** 3\ **Last updated:** [May 17, 2018, 8:21am UTC](https://discuss.elastic.co/t/process-more-than-3000-lines-per-record-in-filebeat/131752 "2018-05-17T08:21:22Z")
When using the multiline.max\_lines and multiline.time\_out file beat does no pick any record. Since the records are bigger than default I must set multiline.max\_lines, correct? Please advice how to do that correctly.… --- ## [Port required for filebeat agent](https://discuss.elastic.co/t/port-required-for-filebeat-agent/132083)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 4\ **Last updated:** [May 17, 2018, 7:18am UTC](https://discuss.elastic.co/t/port-required-for-filebeat-agent/132083 "2018-05-17T07:18:47Z")
We have planning to deploy Filebeat agent for log monitoring but need some information. If i have to transfer log data beat to logstash , which port needs to be open on application server where log present? If i have t… --- ## [I cant enable ouput.elasticsearch and ouput.logstash in same time](https://discuss.elastic.co/t/i-cant-enable-ouput-elasticsearch-and-ouput-logstash-in-same-time/131666)
**Author:** [@Dimas\_Djs](https://discuss.elastic.co/u/Dimas_Djs)\ **Replies:** 6\ **Last updated:** [May 17, 2018, 4:51am UTC](https://discuss.elastic.co/t/i-cant-enable-ouput-elasticsearch-and-ouput-logstash-in-same-time/131666 "2018-05-17T04:51:37Z")
I configure filbeat in my client host, and when i configure my filebeat.yml and enable output.elasticsearh and output.logstash , there is an error when i start my filebeat service. in the error is : filebeat\[18412\]: Ex… --- ## [Metricbeat postgresql module missing field errors](https://discuss.elastic.co/t/metricbeat-postgresql-module-missing-field-errors/132201)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 3\ **Last updated:** [May 16, 2018, 10:39pm UTC](https://discuss.elastic.co/t/metricbeat-postgresql-module-missing-field-errors/132201 "2018-05-16T22:39:39Z")
I have setup and am running metricbeats 6.2.4 with the postgresql module. It seems to be collecting but have 2 issues. I do not see a metricbeat dashboard for the module postgres. Where is it? I am getting the fo… --- ## [Config file ownership and permissions- Filebeat](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889)
**Author:** [@Shatakshi\_Shukla](https://discuss.elastic.co/u/Shatakshi_Shukla)\ **Replies:** 5\ **Last updated:** [May 16, 2018, 7:14pm UTC](https://discuss.elastic.co/t/config-file-ownership-and-permissions-filebeat/131889 "2018-05-16T19:14:14Z")
Filebeat Configuration shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ vi filebeat.yml shatakshis-MacBook-Air:filebeat-6.2.4-darwin-x86\_64 shatakshishukla$ sudo ./filebeat -e -c filebeat.yml -d "pub… --- ## [Filebeats records skipped and out of order](https://discuss.elastic.co/t/filebeats-records-skipped-and-out-of-order/131992)
**Author:** [@pgf](https://discuss.elastic.co/u/pgf)\ **Replies:** 7\ **Last updated:** [May 16, 2018, 4:42pm UTC](https://discuss.elastic.co/t/filebeats-records-skipped-and-out-of-order/131992 "2018-05-16T16:42:55Z")
Hi, I am very new to this but I am trying to create what I thought was a very simple filberts configuration. The file I am reading is not a "normal" log file with timestamps and formatted fields. The first few lines look… --- ## [Logstash output / dashboard field errors](https://discuss.elastic.co/t/logstash-output-dashboard-field-errors/132173)
**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\ **Replies:** 0\ **Last updated:** [May 16, 2018, 4:06pm UTC](https://discuss.elastic.co/t/logstash-output-dashboard-field-errors/132173 "2018-05-16T16:06:50Z")
I was running filebeat in my cluster for a while now and using elastic to ingest the output without a problem but have a business need to do some filtering and decided to change the output to now use logstash instead. Up… --- ## [Can filebeat support k8s master with http?](https://discuss.elastic.co/t/can-filebeat-support-k8s-master-with-http/132014)
**Author:** [@kaku\_li](https://discuss.elastic.co/u/kaku_li)\ **Replies:** 1\ **Last updated:** [May 16, 2018, 3:13pm UTC](https://discuss.elastic.co/t/can-filebeat-support-k8s-master-with-http/132014 "2018-05-16T15:13:12Z")
I find that no matter in\_cluster is true or false, filebeat always visit k8s api server with https method. I also don't have a kubeconfig file. if in\_cluster is false, can filebeat add a config to specify the apiserver a… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=449) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=451)