# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=505 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 506 --- ## [How to track wmtp and bmtp](https://discuss.elastic.co/t/how-to-track-wmtp-and-bmtp/97270)
**Author:** [@rfokkenrood](https://discuss.elastic.co/u/rfokkenrood)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 12:42pm UTC](https://discuss.elastic.co/t/how-to-track-wmtp-and-bmtp/97270 "2017-08-18T12:42:25Z")
Pretty much what it says, how can i get new events in these logs pushed to logstash? So far the only solution i’ve seen is to run logstash on every machine so i can use the last command, but that would mean introducing … --- ## [How to get host IP address?](https://discuss.elastic.co/t/how-to-get-host-ip-address/97274)
**Author:** [@rahul01](https://discuss.elastic.co/u/rahul01)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 12:35pm UTC](https://discuss.elastic.co/t/how-to-get-host-ip-address/97274 "2017-08-18T12:35:34Z")
Hi, I am getting the host name when I see logs in kibana. We have many servers who have common name so its hard to identify server from logs so I want IP address also to be sent in logs. How should I do that? Thanks --- ## [Metric Beat and Packet Beat Clarification](https://discuss.elastic.co/t/metric-beat-and-packet-beat-clarification/97401)
**Author:** [@abirami](https://discuss.elastic.co/u/abirami)\ **Replies:** 3\ **Last updated:** [August 18, 2017, 12:32pm UTC](https://discuss.elastic.co/t/metric-beat-and-packet-beat-clarification/97401 "2017-08-18T12:32:22Z")
Hi All, I want to monitor JVM metrics using metric beat.Can I do that using some filter in process. if any one has done that please share the sample . 2)Using Packet beat , I want to capture traffic running with SCT… --- ## [How to limit filebeat logs to logstash](https://discuss.elastic.co/t/how-to-limit-filebeat-logs-to-logstash/97504)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 12:11pm UTC](https://discuss.elastic.co/t/how-to-limit-filebeat-logs-to-logstash/97504 "2017-08-18T12:11:54Z")
Hi, i am sending our production logs to logstash cluster which has 6 server in cluster. In my filebeat setting i have number of workers as 2 . So 12 pipelines to logstash cluster each prod server. But sometimes due to … --- ## [Multiline example simulation issue](https://discuss.elastic.co/t/multiline-example-simulation-issue/97453)
**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 10:28am UTC](https://discuss.elastic.co/t/multiline-example-simulation-issue/97453 "2017-08-18T10:28:52Z")
Hi I tried simulating the multiline example given at link: Below are my filebeat.yml details. filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use differ… --- ## [Setting index in Auditbeat](https://discuss.elastic.co/t/setting-index-in-auditbeat/97501)
**Author:** [@brunopsitech](https://discuss.elastic.co/u/brunopsitech)\ **Replies:** 1\ **Last updated:** [August 18, 2017, 5:47am UTC](https://discuss.elastic.co/t/setting-index-in-auditbeat/97501 "2017-08-18T05:47:11Z")
Hi, i want to create a organization with this index: auditbeat - auditbeat-DD-MM-YYYY I cant find where to specify a master index ( auditbeat ) and all the logs create in. Someone know if its possible ? --- ## [Stagger pings within a monitor](https://discuss.elastic.co/t/stagger-pings-within-a-monitor/96693)
**Author:** [@packland](https://discuss.elastic.co/u/packland)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 4:01am UTC](https://discuss.elastic.co/t/stagger-pings-within-a-monitor/96693 "2017-08-18T04:01:29Z")
I’m just wondering if there is functionality for staggering all of the ping requests within a heartbeat monitor so that they do not occur at the same time. i.e. would it be possible to arrange 1000 or so requests to be … --- ## [Approach to send metrics to Elasticsearch in a new module](https://discuss.elastic.co/t/approach-to-send-metrics-to-elasticsearch-in-a-new-module/97279)
**Author:** [@madou23](https://discuss.elastic.co/u/madou23)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 10:29pm UTC](https://discuss.elastic.co/t/approach-to-send-metrics-to-elasticsearch-in-a-new-module/97279 "2017-08-17T22:29:18Z")
Hi all, I’m trying to create a new metricbeat module for Jenkins. Actually, I’m working with this wonderful API : Jenkins API Client for Go I’m trying to send all jobs information include it’s builds but I’m facing a p… --- ## [Importing multiple csv files to different indexes in elastic by beats?](https://discuss.elastic.co/t/importing-multiple-csv-files-to-different-indexes-in-elastic-by-beats/97359)
**Author:** [@remziay](https://discuss.elastic.co/u/remziay)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 10:07pm UTC](https://discuss.elastic.co/t/importing-multiple-csv-files-to-different-indexes-in-elastic-by-beats/97359 "2017-08-17T22:07:02Z")
Hello, is there a way to import different csv files to elastic (each csv have its own index on elastic) via beats? --- ## [Issue with Multiline Logs](https://discuss.elastic.co/t/issue-with-multiline-logs/97432)
**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 10:03pm UTC](https://discuss.elastic.co/t/issue-with-multiline-logs/97432 "2017-08-17T22:03:10Z")
Hi I am trying to read log file with multilines for a single log. I have configured filebeat.yml as below: \> - input\_type: log \> paths: \> - C:\\ELK\\\*.log \> fields: \> tech\_stack: XXX \> kpi\_type: YYY \> … --- ## [Rate limiting between Filebeat and Logstash?](https://discuss.elastic.co/t/rate-limiting-between-filebeat-and-logstash/95377)
**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\ **Replies:** 9\ **Last updated:** [August 17, 2017, 9:27pm UTC](https://discuss.elastic.co/t/rate-limiting-between-filebeat-and-logstash/95377 "2017-08-17T21:27:38Z")
If there any rate limiting between filebeat and logstash? or some kind of back pressure setting that between filebeat and logstash? We have ~2K server running filebeat and input logs to (12) logstash by using the beat … --- ## [Multiline error](https://discuss.elastic.co/t/multiline-error/97269)
**Author:** [@egonzalez](https://discuss.elastic.co/u/egonzalez)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 9:24pm UTC](https://discuss.elastic.co/t/multiline-error/97269 "2017-08-17T21:24:48Z")
I have problem with filebeat multiline options. /usr/bin/filebeat -version filebeat version 5.5.1 (amd64), libbeat 5.5.1 Fragment of my server.log: 10:25:14,694 INFO \[org.apache.catalina.core.ContainerBase.\[jboss.web\]… --- ## [Packetbeat agent not returning HTTP fields](https://discuss.elastic.co/t/packetbeat-agent-not-returning-http-fields/97277)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 9:14pm UTC](https://discuss.elastic.co/t/packetbeat-agent-not-returning-http-fields/97277 "2017-08-17T21:14:27Z")
Packetbeat 1.2.2 ElasticSearch 2.1.0 OS: Windows Server 2008 R2 I have deployed packetbeat agent on a Windows system. It is returning following fields. beat.hostname client\_ip client\_port direction ip method po… --- ## [Metricbeat data gets into logstash but cannot index logs](https://discuss.elastic.co/t/metricbeat-data-gets-into-logstash-but-cannot-index-logs/97001)
**Author:** [@pshah7](https://discuss.elastic.co/u/pshah7)\ **Replies:** 8\ **Last updated:** [August 17, 2017, 7:02pm UTC](https://discuss.elastic.co/t/metricbeat-data-gets-into-logstash-but-cannot-index-logs/97001 "2017-08-17T19:02:11Z")
Hi there, I’m newbie to elastic and I’m trying to setup topbeat to ship logs to logstash. I have installed filebeat on my client and it can ship logs to logstash. Topbeat logs from client - 2017-08-14T13:04:05-04:00 D… --- ## [Jolokia module with variable JMX paths](https://discuss.elastic.co/t/jolokia-module-with-variable-jmx-paths/97470)
**Author:** [@Mark\_van\_Rossum](https://discuss.elastic.co/u/Mark_van_Rossum)\ **Replies:** 0\ **Last updated:** [August 17, 2017, 6:45pm UTC](https://discuss.elastic.co/t/jolokia-module-with-variable-jmx-paths/97470 "2017-08-17T18:45:25Z")
I’d like to export the number of active sessions in Tomcat. This has a path in JMX that looks like: “Tomcat.Manager.\[context\].localhost.active\_sessions” where \[context\] is the path for the application. e.g. “Tomcat.M… --- ## [Missing searches for example Kibana dashboards in packetbeat-6.0.0-beta1](https://discuss.elastic.co/t/missing-searches-for-example-kibana-dashboards-in-packetbeat-6-0-0-beta1/97376)
**Author:** [@zanbel](https://discuss.elastic.co/u/zanbel)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 4:35pm UTC](https://discuss.elastic.co/t/missing-searches-for-example-kibana-dashboards-in-packetbeat-6-0-0-beta1/97376 "2017-08-17T16:35:17Z")
Hi! Seems there a few missing searches to in the example Kibana Packetbeat dashboards. Steps to reproduce: Install packetbeat-6.0.0-beta1-amd64.deb. Setup the default dashboards using ./packetbeat setup --dashboards … --- ## [Unable to connect to postgres module from metricbeat](https://discuss.elastic.co/t/unable-to-connect-to-postgres-module-from-metricbeat/97203)
**Author:** [@Dinesh\_Senthil\_Kumar](https://discuss.elastic.co/u/Dinesh_Senthil_Kumar)\ **Replies:** 6\ **Last updated:** [August 17, 2017, 1:48pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-postgres-module-from-metricbeat/97203 "2017-08-17T13:48:21Z")
hi ALL, i ma getting the bewlo error while connecting to postgres module from metric beat. need your help or pointers to resolve the same. currently i am using metric beat 5.4.x and postgres 9.5.05. 2017/08/16 08:02:… --- ## [Kibana and Metricbeat time visual builder](https://discuss.elastic.co/t/kibana-and-metricbeat-time-visual-builder/97428)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 0\ **Last updated:** [August 17, 2017, 1:43pm UTC](https://discuss.elastic.co/t/kibana-and-metricbeat-time-visual-builder/97428 "2017-08-17T13:43:10Z")
Hi All, we tried to create a custom dashboard starting from the metricbeat data imported from some systems and we would create a time series visualization using the system.memory.acual.used.pct field, but if we tried to… --- ## [\[SOLVED\] Beats event metrics in logs: official explanation?](https://discuss.elastic.co/t/solved-beats-event-metrics-in-logs-official-explanation/96604)
**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 11:43am UTC](https://discuss.elastic.co/t/solved-beats-event-metrics-in-logs-official-explanation/96604 "2017-08-17T11:43:32Z")
Hi, I’d like to get an authoritative definition of libbeat metrics as they appear in logs: libbeat.es.call\_count.PublishEvents publish.events libbeat.es.published\_and\_acked\_events libbeat.publisher.published\_events I… --- ## [How do i pass relative configuration path from CLI to filebeat?](https://discuss.elastic.co/t/how-do-i-pass-relative-configuration-path-from-cli-to-filebeat/96913)
**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\ **Replies:** 0\ **Last updated:** [August 14, 2017, 6:59am UTC](https://discuss.elastic.co/t/how-do-i-pass-relative-configuration-path-from-cli-to-filebeat/96913 "2017-08-14T06:59:04Z")
I want to send relative configuration path from CLI to filebeat d:\\uat\\beats\\filebeat550\\config\\myappserver folder have filebeat.yml Currently I am using filebeat -path.config=d:\\uat\\beats\\filebeat550\\config\\myapps… --- ## [Feed GeoLocation over WAN](https://discuss.elastic.co/t/feed-geolocation-over-wan/96636)
**Author:** [@Dami](https://discuss.elastic.co/u/Dami)\ **Replies:** 8\ **Last updated:** [August 16, 2017, 9:45pm UTC](https://discuss.elastic.co/t/feed-geolocation-over-wan/96636 "2017-08-16T21:45:12Z")
Is there any way I can get client location without GeoIP ingest plugin? I’m using the available modules for filebeat and metricbeat, and also about to include heartbeat and packetbeat. --- ## [Metricbeats v6 beta - Perfmon Metricset not reading query value if labels match](https://discuss.elastic.co/t/metricbeats-v6-beta-perfmon-metricset-not-reading-query-value-if-labels-match/97301)
**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\ **Replies:** 0\ **Last updated:** [August 16, 2017, 4:53pm UTC](https://discuss.elastic.co/t/metricbeats-v6-beta-perfmon-metricset-not-reading-query-value-if-labels-match/97301 "2017-08-16T16:53:29Z")
Have been playing around with the new perfmon metricset for Metricbeat v6 beta Attempting to Pick up values from the set below, note no instance name so have to add one: Noticed if you have the instance label end fie… --- ## [Error INFO No non-zero metrics in the last 30s](https://discuss.elastic.co/t/error-info-no-non-zero-metrics-in-the-last-30s/96600)
**Author:** [@hadivarp](https://discuss.elastic.co/u/hadivarp)\ **Replies:** 7\ **Last updated:** [August 16, 2017, 1:22pm UTC](https://discuss.elastic.co/t/error-info-no-non-zero-metrics-in-the-last-30s/96600 "2017-08-16T13:22:15Z")
I know this error is repeated a lot but I am really confused . I need to run file beat and ELK on two different server witch one of the is client and the other sever . I follow all the steps that comes in instruction .… --- ## [Auditbeat visualisation](https://discuss.elastic.co/t/auditbeat-visualisation/97219)
**Author:** [@shubhrant](https://discuss.elastic.co/u/shubhrant)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 1:09pm UTC](https://discuss.elastic.co/t/auditbeat-visualisation/97219 "2017-08-16T13:09:47Z")
Hello all, Actually I have configured the Auditbeat in my ubuntu system and looking for some kibana sample visualisation and dashboard . Thanks --- ## [Can not convert 'object' into 'string'](https://discuss.elastic.co/t/can-not-convert-object-into-string/97028)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 12:32pm UTC](https://discuss.elastic.co/t/can-not-convert-object-into-string/97028 "2017-08-16T12:32:09Z")
Getting these errors, did a ton of searching around but no luck. Running bitnam elki vm on debian. and filebeat on centos7. 2017-08-14T21:44:38Z INFO Home path: \[/usr/share/filebeat\] Config path: \[/etc/filebeat\] Data pa… --- ## [Filebeat keeps open files, s3 upload fail](https://discuss.elastic.co/t/filebeat-keeps-open-files-s3-upload-fail/96572)
**Author:** [@Michal\_K](https://discuss.elastic.co/u/Michal_K)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 10:24am UTC](https://discuss.elastic.co/t/filebeat-keeps-open-files-s3-upload-fail/96572 "2017-08-16T10:24:50Z")
Hi, We have filebeat instances on huge amout of servers but couple of them are problematic. Cofiguration looks like: Filebeat harvests files from folder /mnt/log/\*.log and sends them to ES cluster. There is a lot traf… --- ## [UCS-2LE encoding not harvested](https://discuss.elastic.co/t/ucs-2le-encoding-not-harvested/97081)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 7:10am UTC](https://discuss.elastic.co/t/ucs-2le-encoding-not-harvested/97081 "2017-08-16T07:10:53Z")
Hi, I have a log file with with ucs-2 little endian encoding. For some reason these log file are not harversted by Filebeat if no encoding is configured. When I have tried to configure the follwoing encoding entries n… --- ## [Ingest node: Invalid format...date and time is malformed](https://discuss.elastic.co/t/ingest-node-invalid-format-date-and-time-is-malformed/97156)
**Author:** [@hungl99](https://discuss.elastic.co/u/hungl99)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 11:05pm UTC](https://discuss.elastic.co/t/ingest-node-invalid-format-date-and-time-is-malformed/97156 "2017-08-15T23:05:36Z")
I try to parse a csv file using a pipeline but got into problem with the date format. Appreciate any help! Here is my pipiline: { "pipeline": { "description" : "parse stat logs", "processors": \[ { "gr… --- ## [Flows detected on port 6379, but no Redis Protocol logs generated?](https://discuss.elastic.co/t/flows-detected-on-port-6379-but-no-redis-protocol-logs-generated/97007)
**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 8:50pm UTC](https://discuss.elastic.co/t/flows-detected-on-port-6379-but-no-redis-protocol-logs-generated/97007 "2017-08-15T20:50:47Z")
I'm not seeing Redis Protocol logs, but I am seeing flows to and from the Redis port. Why would that the case? I have the Redis Protocol enabled in my packetbeat.yml file: packetbeat.protocols.redis: # Configure the … --- ## [Filebeat + Apache2 Module + add field](https://discuss.elastic.co/t/filebeat-apache2-module-add-field/96747)
**Author:** [@Globule](https://discuss.elastic.co/u/Globule)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 8:38pm UTC](https://discuss.elastic.co/t/filebeat-apache2-module-add-field/96747 "2017-08-15T20:38:44Z")
Hello, I try to add a field with vhost name. Actually, the filebeat module apache2 work but it dosen’t show the vhost name. My apache log looks like this: www.foo.com:443 37.34.55.121 - - \[11/Aug/2017:12:07:53 +0200\] … [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=504) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=506)