# Beats

**URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=481

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 482

---

## [Monitor Nodejs process stats using metricbeat](https://discuss.elastic.co/t/monitor-nodejs-process-stats-using-metricbeat/112386)

<div class="topic-metadata">

**Author:** [@Varun\_Karuturi](https://discuss.elastic.co/u/Varun_Karuturi)\
**Replies:** 2\
**Last updated:** [January 8, 2018, 9:40am UTC](https://discuss.elastic.co/t/monitor-nodejs-process-stats-using-metricbeat/112386 "2018-01-08T09:40:27Z")

</div>

Hi, I have few nodejs processes running in my machine, Could you please help me out on how to monitor the nodejs process using metricbeat. I basically need to monitor the cpu, memory, etc for each node process. Please …

---

## [Live reload on output elasticsearch hosts config change](https://discuss.elastic.co/t/live-reload-on-output-elasticsearch-hosts-config-change/114348)

<div class="topic-metadata">

**Author:** [@vramakrishnan](https://discuss.elastic.co/u/vramakrishnan)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 8:46am UTC](https://discuss.elastic.co/t/live-reload-on-output-elasticsearch-hosts-config-change/114348 "2018-01-08T08:46:41Z")

</div>

Does filebeat support live reload when there is change in output elastic list of hosts config ? In our use, the list of elastic host may change dynamically in certain scenarios and wondering if there is support to live…

---

## [Metricbeat- container overview error](https://discuss.elastic.co/t/metricbeat-container-overview-error/114428)

<div class="topic-metadata">

**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\
**Replies:** 1\
**Last updated:** [January 8, 2018, 1:59am UTC](https://discuss.elastic.co/t/metricbeat-container-overview-error/114428 "2018-01-08T01:59:56Z")

</div>

All of a sudden in my metricbeat dashboard, i cannot view certain elements. It is poping the following error, Could not locate that index-pattern (id: metricbeat\*), \[click here to re-create it\](#/management/kibana/index…

---

## [How can i use the timestamp in the source file rather than the timestamp generate automatically](https://discuss.elastic.co/t/how-can-i-use-the-timestamp-in-the-source-file-rather-than-the-timestamp-generate-automatically/114374)

<div class="topic-metadata">

**Author:** [@yigene](https://discuss.elastic.co/u/yigene)\
**Replies:** 7\
**Last updated:** [January 6, 2018, 2:44pm UTC](https://discuss.elastic.co/t/how-can-i-use-the-timestamp-in-the-source-file-rather-than-the-timestamp-generate-automatically/114374 "2018-01-06T14:44:53Z")

</div>

i am trying to use FileBeat directly parse the log file and send to elastic search. here is the example of the data 2018-01-06 20:13:22 sending the number 7496 to outchannel 2018-01-06 20:13:22 sending the number 7496 …

---

## [How to handle windows rate performance counters](https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364)

<div class="topic-metadata">

**Author:** [@Arno\_den\_Uijl](https://discuss.elastic.co/u/Arno_den_Uijl)\
**Replies:** 0\
**Last updated:** [January 6, 2018, 10:31am UTC](https://discuss.elastic.co/t/how-to-handle-windows-rate-performance-counters/114364 "2018-01-06T10:31:59Z")

</div>

Hi, os: windows 10 beat: metricbeat-6.1.1-windows-x86\_64 I use metric beat to collect performance counters on windows. It's not clear to me how to handle counters that give a rate (things per second) given the way tha…

---

## [Unable to define multiple log file location in filebeat](https://discuss.elastic.co/t/unable-to-define-multiple-log-file-location-in-filebeat/114094)

<div class="topic-metadata">

**Author:** [@Punit\_Bangade](https://discuss.elastic.co/u/Punit_Bangade)\
**Replies:** 2\
**Last updated:** [January 6, 2018, 5:44am UTC](https://discuss.elastic.co/t/unable-to-define-multiple-log-file-location-in-filebeat/114094 "2018-01-06T05:44:06Z")

</div>

I am trying to configure multiple file location in filebeat.yml but its not sending the logs eg paths: - D:\\logs\\\*.logs - D:\\logs\\INT1\\\*.logs Can you please help to resolve the issue

---

## [Filebeat on Raspberry Pi](https://discuss.elastic.co/t/filebeat-on-raspberry-pi/113697)

<div class="topic-metadata">

**Author:** [@dm90](https://discuss.elastic.co/u/dm90)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:55pm UTC](https://discuss.elastic.co/t/filebeat-on-raspberry-pi/113697 "2018-01-05T23:55:14Z")

</div>

Continuing the discussion from How to install Filebeat on a ARM based SBC (eg. Raspberry Pi 3): @andrewkroh Provided easy steps to build an ARM binary for rpi. Consolidated into a shell script for easy execution. Test…

---

## [How to fetch IP address of using winlogbeat?](https://discuss.elastic.co/t/how-to-fetch-ip-address-of-using-winlogbeat/113409)

<div class="topic-metadata">

**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\
**Replies:** 8\
**Last updated:** [January 5, 2018, 5:40pm UTC](https://discuss.elastic.co/t/how-to-fetch-ip-address-of-using-winlogbeat/113409 "2018-01-05T17:40:19Z")

</div>

Hi, I installed winlogbeat on host but i am only able to see hostname of the device not source ip. Is there any configuration changes required to get source ip ?

---

## [Using beats in pfsense firewall to get system logs](https://discuss.elastic.co/t/using-beats-in-pfsense-firewall-to-get-system-logs/113749)

<div class="topic-metadata">

**Author:** [@rahul01](https://discuss.elastic.co/u/rahul01)\
**Replies:** 5\
**Last updated:** [January 5, 2018, 12:08pm UTC](https://discuss.elastic.co/t/using-beats-in-pfsense-firewall-to-get-system-logs/113749 "2018-01-05T12:08:09Z")

</div>

Hello I'm using freebsd pfsense 2.4.2, and I want to send system authentication logs to kafka. So is it possible to install any beats in pfsense and monitor? Thanks & Regards Rahul

---

## [WARN kafka message: client/metadata found some partitions to be leaderless](https://discuss.elastic.co/t/warn-kafka-message-client-metadata-found-some-partitions-to-be-leaderless/113293)

<div class="topic-metadata">

**Author:** [@Abhijit\_Paul](https://discuss.elastic.co/u/Abhijit_Paul)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 11:59am UTC](https://discuss.elastic.co/t/warn-kafka-message-client-metadata-found-some-partitions-to-be-leaderless/113293 "2018-01-05T11:59:53Z")

</div>

Hi All, I am unable to post a message from filebeat as an external producer (outside k8s cluster) to kafka-inside kubernetes cluster. The topic "test\_topic" is already created. Error from filebeat: 2017/12/27 09:26:0…

---

## [Filebeat sends incomplete message both in logstash and elasticsearch](https://discuss.elastic.co/t/filebeat-sends-incomplete-message-both-in-logstash-and-elasticsearch/114007)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 11:57am UTC](https://discuss.elastic.co/t/filebeat-sends-incomplete-message-both-in-logstash-and-elasticsearch/114007 "2018-01-05T11:57:32Z")

</div>

We've noticed that our message seems incomplete in filebeat/logstash. Btw, the message field is our xml payload, and we need to store this for searching. When we stdout in filebeat, the message is somewhat cut, i wonder …

---

## [Beats 5.6 and Kafka 1.0 SSL handshake error](https://discuss.elastic.co/t/beats-5-6-and-kafka-1-0-ssl-handshake-error/114145)

<div class="topic-metadata">

**Author:** [@jmtmoulin](https://discuss.elastic.co/u/jmtmoulin)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:53am UTC](https://discuss.elastic.co/t/beats-5-6-and-kafka-1-0-ssl-handshake-error/114145 "2018-01-05T11:53:45Z")

</div>

I hope I am publishing this is in the right spot, since this involves more than just beats. Currently I am having issues communicating with kafka using beats (filebeat, metricbeat) with SSL. I’m at the point where I do k…

---

## [Filebeat registry permissions](https://discuss.elastic.co/t/filebeat-registry-permissions/113850)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 1\
**Last updated:** [January 5, 2018, 11:33am UTC](https://discuss.elastic.co/t/filebeat-registry-permissions/113850 "2018-01-05T11:33:18Z")

</div>

Is there any way to set the permissions for the registry file? I'm trying to let another user read that file but it just get's changed every 2 seconds back to 0600.

---

## [Filebeat not connecting to ES](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834)

<div class="topic-metadata">

**Author:** [@sudhakar](https://discuss.elastic.co/u/sudhakar)\
**Replies:** 3\
**Last updated:** [January 5, 2018, 11:28am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834 "2018-01-05T11:28:05Z")

</div>

I know this has been discussed quite a few times but would really appreciate the help on this as I have went through all the solutions but none of them would work. Filebeat service is not connecting to ES for direct out…

---

## [Closing because close\_inactive of 5m0s reached](https://discuss.elastic.co/t/closing-because-close-inactive-of-5m0s-reached/114136)

<div class="topic-metadata">

**Author:** [@Pavan\_Kumar1](https://discuss.elastic.co/u/Pavan_Kumar1)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 11:27am UTC](https://discuss.elastic.co/t/closing-because-close-inactive-of-5m0s-reached/114136 "2018-01-05T11:27:51Z")

</div>

Hi, I do see a lot of posts on this, I tried everything but I am not able to get this working. Can you please help? This is my filebeat log: 2018-01-04T12:29:54-05:00 INFO Harvester started for file: /logs/staff\_secur…

---

## [2 out of the 10 prospectors does not get enabled while starting filebeat agent](https://discuss.elastic.co/t/2-out-of-the-10-prospectors-does-not-get-enabled-while-starting-filebeat-agent/111538)

<div class="topic-metadata">

**Author:** [@FreddyRaj](https://discuss.elastic.co/u/FreddyRaj)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 9:44am UTC](https://discuss.elastic.co/t/2-out-of-the-10-prospectors-does-not-get-enabled-while-starting-filebeat-agent/111538 "2018-01-05T09:44:58Z")

</div>

Hi Team, I am noticing an issue in visualizing 2 of my application logs in KIBANA. The set up i have is there are 10 application logs in a server out of which 8 prospectors get enabled and logs are sent to be viewed in…

---

## [Test Failures for Beats v6.1.1 in Metricbeat and Auditbeat](https://discuss.elastic.co/t/test-failures-for-beats-v6-1-1-in-metricbeat-and-auditbeat/114202)

<div class="topic-metadata">

**Author:** [@adityap101](https://discuss.elastic.co/u/adityap101)\
**Replies:** 0\
**Last updated:** [January 5, 2018, 5:33am UTC](https://discuss.elastic.co/t/test-failures-for-beats-v6-1-1-in-metricbeat-and-auditbeat/114202 "2018-01-05T05:33:49Z")

</div>

I am facing below mentioned test failures for Beats v6.1.1 on Intel x86 - Ubuntu 16.04. I have built beats from source using steps: make make update Executed tests using command: make unit make system-tests These …

---

## [Filebeat single prospector with 2 different multiline pattern](https://discuss.elastic.co/t/filebeat-single-prospector-with-2-different-multiline-pattern/114047)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 2\
**Last updated:** [January 5, 2018, 5:25am UTC](https://discuss.elastic.co/t/filebeat-single-prospector-with-2-different-multiline-pattern/114047 "2018-01-05T05:25:01Z")

</div>

Hello All, I would like to know if filebeat with single prospector can process 2 different logs with 2 different multiline patterns. If yes, How can i achieve that? Problem : The two below is a sample log format we ha…

---

## [Getting packetbeat to pull MySQL data](https://discuss.elastic.co/t/getting-packetbeat-to-pull-mysql-data/113650)

<div class="topic-metadata">

**Author:** [@sarman](https://discuss.elastic.co/u/sarman)\
**Replies:** 5\
**Last updated:** [January 4, 2018, 1:19pm UTC](https://discuss.elastic.co/t/getting-packetbeat-to-pull-mysql-data/113650 "2018-01-04T13:19:10Z")

</div>

Hi all, and thanks in advance. I am having issues getting packetbeat to pull some MySQL data. I have reviewed several different threads related to this same type of issue, but none have quit been like mine, or have help…

---

## [Could Filebeat use UDP to send data to logstash?](https://discuss.elastic.co/t/could-filebeat-use-udp-to-send-data-to-logstash/113527)

<div class="topic-metadata">

**Author:** [@vermouth0064](https://discuss.elastic.co/u/vermouth0064)\
**Replies:** 5\
**Last updated:** [January 4, 2018, 1:09pm UTC](https://discuss.elastic.co/t/could-filebeat-use-udp-to-send-data-to-logstash/113527 "2018-01-04T13:09:04Z")

</div>

My boss argues that the TCP protocol in filebeat increases too many connections that will fill the connection pool and block other processes, so he advised us to use UDP. My question is whether he is correct and whether …

---

## [Unable send logs from filebeat 6 to kafka](https://discuss.elastic.co/t/unable-send-logs-from-filebeat-6-to-kafka/113513)

<div class="topic-metadata">

**Author:** [@ktella](https://discuss.elastic.co/u/ktella)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 1:01pm UTC](https://discuss.elastic.co/t/unable-send-logs-from-filebeat-6-to-kafka/113513 "2018-01-04T13:01:49Z")

</div>

Below is my filebeat6 config. -sh-4.1$ grep -v # filebeat.yml filebeat.prospectors: type: log enabled: true paths: /var/log/nginx/ss-xxxxx.access.log exclude\_files: \['.gz$'\] tags: \["xxxxx"\] filebeat.config.mo…

---

## [Noob Alert: Trying to use FileBeat to store my JSON file into Elasticsearch](https://discuss.elastic.co/t/noob-alert-trying-to-use-filebeat-to-store-my-json-file-into-elasticsearch/113684)

<div class="topic-metadata">

**Author:** [@Aw\_Jeng\_Kit](https://discuss.elastic.co/u/Aw_Jeng_Kit)\
**Replies:** 1\
**Last updated:** [January 4, 2018, 12:58pm UTC](https://discuss.elastic.co/t/noob-alert-trying-to-use-filebeat-to-store-my-json-file-into-elasticsearch/113684 "2018-01-04T12:58:13Z")

</div>

Hi, I am a noob in ELK. My use case is this, I have created a Json file named data.json, which looks like this: {"clusterVirtutalCores": {"totalvc": 1, "reservedvc": 0, "allocatedvc": 0, "availablevc": 1}, "Capacity": …

---

## [Unable to parse docker json-file](https://discuss.elastic.co/t/unable-to-parse-docker-json-file/112416)

<div class="topic-metadata">

**Author:** [@Asaf\_Shabat](https://discuss.elastic.co/u/Asaf_Shabat)\
**Replies:** 7\
**Last updated:** [January 4, 2018, 12:45pm UTC](https://discuss.elastic.co/t/unable-to-parse-docker-json-file/112416 "2018-01-04T12:45:39Z")

</div>

Hello, I'm trying to parse docker json-file output to Logstash using Filebeat and to break the message log into fields. Currently, this is what I can parse into Kibana: { "\_index": "filebeat-2017.12.19", "\_type": …

---

## [Configuration of Filebeat Modules](https://discuss.elastic.co/t/configuration-of-filebeat-modules/114081)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 0\
**Last updated:** [January 4, 2018, 12:03pm UTC](https://discuss.elastic.co/t/configuration-of-filebeat-modules/114081 "2018-01-04T12:03:57Z")

</div>

Hi, After enabling Apache2, and Mysql modules with filebeat 6.1 on windows, i didn't get any data on Kibana and dashboards. Maybe my configuration is missed something, to ship logs by using modules. Please check my fil…

---

## [Configuring filebeat 6.1 modules in windows](https://discuss.elastic.co/t/configuring-filebeat-6-1-modules-in-windows/113921)

<div class="topic-metadata">

**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\
**Replies:** 3\
**Last updated:** [January 4, 2018, 8:50am UTC](https://discuss.elastic.co/t/configuring-filebeat-6-1-modules-in-windows/113921 "2018-01-04T08:50:50Z")

</div>

Hi, I installed filebeat 6.1 on my PC to ship Apache2, and Mysql logs to my Elasticsearch server. Do we have any documentation on how to enable and configure modules in windows 10? I tried to enable apache2 and mysql m…

---

## [Metricbeat 6.x is not starting (Windows)](https://discuss.elastic.co/t/metricbeat-6-x-is-not-starting-windows/113784)

<div class="topic-metadata">

**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\
**Replies:** 7\
**Last updated:** [January 4, 2018, 8:33am UTC](https://discuss.elastic.co/t/metricbeat-6-x-is-not-starting-windows/113784 "2018-01-04T08:33:45Z")

</div>

Hi everyone, i already used Metricbeat for the windows perfmon plugin in version 6.0.0-alpha2 to collect metrics from websites. now i was trying to replace 6.0.0-alpha2 with the 6.0.1 or 6.1.1 version, but it won't sta…

---

## [Filebeat dashboards broken for 6.0](https://discuss.elastic.co/t/filebeat-dashboards-broken-for-6-0/112535)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 12\
**Last updated:** [January 4, 2018, 12:29am UTC](https://discuss.elastic.co/t/filebeat-dashboards-broken-for-6-0/112535 "2018-01-04T00:29:50Z")

</div>

Looks like there are several visualizations that need to have the .keyword value appended to them. Is this a known issue? Doesn't look like there's a 6.0 folder yet so that's my guess.

---

## [No paths were defined for prospector accessing config](https://discuss.elastic.co/t/no-paths-were-defined-for-prospector-accessing-config/113460)

<div class="topic-metadata">

**Author:** [@Nonow53](https://discuss.elastic.co/u/Nonow53)\
**Replies:** 6\
**Last updated:** [January 3, 2018, 11:18pm UTC](https://discuss.elastic.co/t/no-paths-were-defined-for-prospector-accessing-config/113460 "2018-01-03T23:18:18Z")

</div>

Hi, I try the Quick Start guide for Filebeat (https://www.elastic.co/guide/en/beats/filebeat/6.1/filebeat-modules-quickstart.html#setting-variables) but I encounter a problem when I launch the folloing command : .\\file…

---

## [mySql binlog](https://discuss.elastic.co/t/mysql-binlog/113415)

<div class="topic-metadata">

**Author:** [@evuori](https://discuss.elastic.co/u/evuori)\
**Replies:** 3\
**Last updated:** [January 3, 2018, 11:17pm UTC](https://discuss.elastic.co/t/mysql-binlog/113415 "2018-01-03T23:17:35Z")

</div>

Hey there, new here so I try to behave and keep this short Looking if it is possible to parse and ship mySql binlog with Filebeat? Im currently using solution built using python-mysql-replication module reading only I…

---

## [High volume apache httpd 2.4 access log processing](https://discuss.elastic.co/t/high-volume-apache-httpd-2-4-access-log-processing/113519)

<div class="topic-metadata">

**Author:** [@davidbernard](https://discuss.elastic.co/u/davidbernard)\
**Replies:** 1\
**Last updated:** [January 3, 2018, 11:15pm UTC](https://discuss.elastic.co/t/high-volume-apache-httpd-2-4-access-log-processing/113519 "2018-01-03T23:15:55Z")

</div>

I am wanting to move from "scribe" to ElasticStack for processing apache httpd 2.4 access logs. I have identified the following approaches: Option 1 CustomLog with pipe configuration for FileBeat processing stdin. Op…

[Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=480)

[Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=482)
