# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=506 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 507 --- ## [Filebeat module apache2 no see website name in log](https://discuss.elastic.co/t/filebeat-module-apache2-no-see-website-name-in-log/96397)
**Author:** [@Globule](https://discuss.elastic.co/u/Globule)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 8:26pm UTC](https://discuss.elastic.co/t/filebeat-module-apache2-no-see-website-name-in-log/96397 "2017-08-15T20:26:48Z")
Hello, I have set filebeat module apache2 on all servers. I can see the log in kibana web app, but I can’t see the vhost name… If I check in default.json apache2 module in filebeat dir , I see this: description": “Pip… --- ## [Folder share in RHEL 7 and read log file through Filebeat](https://discuss.elastic.co/t/folder-share-in-rhel-7-and-read-log-file-through-filebeat/96347)
**Author:** [@Leela\_Kodali](https://discuss.elastic.co/u/Leela_Kodali)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 8:15pm UTC](https://discuss.elastic.co/t/folder-share-in-rhel-7-and-read-log-file-through-filebeat/96347 "2017-08-15T20:15:13Z")
Hi, My websphere application server is on RHEL 7 and i am planning to read systemOut log file in one of the folder, can you please help me how to do folder share in Linux. i have another Linux server where i have ELK a… --- ## [What is the last\_time field supposed to represent?](https://discuss.elastic.co/t/what-is-the-last-time-field-supposed-to-represent/96644)
**Author:** [@wmathews](https://discuss.elastic.co/u/wmathews)\ **Replies:** 3\ **Last updated:** [August 15, 2017, 7:53pm UTC](https://discuss.elastic.co/t/what-is-the-last-time-field-supposed-to-represent/96644 "2017-08-15T19:53:59Z")
The documentation says “The time, the most recent processed packet for the flow has been seen.”, however for all of the entries in my cluster, this is always exactly the same as the start\_time field even when the flow wa… --- ## [There is any plan that filebeat output supports flume?](https://discuss.elastic.co/t/there-is-any-plan-that-filebeat-output-supports-flume/97078)
**Author:** [@aqiao](https://discuss.elastic.co/u/aqiao)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 7:45pm UTC](https://discuss.elastic.co/t/there-is-any-plan-that-filebeat-output-supports-flume/97078 "2017-08-15T19:45:34Z")
there is any plan that filebeat output supports flume? --- ## [Filebeat not forwarding tags to logstash](https://discuss.elastic.co/t/filebeat-not-forwarding-tags-to-logstash/97035)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 11:39pm UTC](https://discuss.elastic.co/t/filebeat-not-forwarding-tags-to-logstash/97035 "2017-08-14T23:39:07Z")
Here’s my filebeat config: logging.level: debug filebeat.registry\_file: /tmp/registry filebeat.prospectors: - type: log enabled: true paths: - /log/\* shipper: tags: - source:docker - pod:sts-emergenc… --- ## [FileBeat multiline parser fails with '^#\[0-9\]'](https://discuss.elastic.co/t/filebeat-multiline-parser-fails-with-0-9/97012)
**Author:** [@ianseyer](https://discuss.elastic.co/u/ianseyer)\ **Replies:** 1\ **Last updated:** [August 14, 2017, 6:35pm UTC](https://discuss.elastic.co/t/filebeat-multiline-parser-fails-with-0-9/97012 "2017-08-14T18:35:22Z")
Hi. I am attempting to use the multiline parser for Filebeat to chunk my Laravel log into useful segments. Laravel logs spew a multi-line stacktrace by prepending each line with #1, #2, …, #n. Therefore, I am attempting… --- ## [Filebeat 5.5.1 is not work with symlink file when symlinks option has been set true](https://discuss.elastic.co/t/filebeat-5-5-1-is-not-work-with-symlink-file-when-symlinks-option-has-been-set-true/96990)
**Author:** [@CharlieQiu](https://discuss.elastic.co/u/CharlieQiu)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 3:49pm UTC](https://discuss.elastic.co/t/filebeat-5-5-1-is-not-work-with-symlink-file-when-symlinks-option-has-been-set-true/96990 "2017-08-14T15:49:02Z")
Version: 5.5.1 Operating System: Linux Steps to Reproduce: I use it in kubernetes. I try to use it as a sidecar in order to forward logs from the containers in same pod. apiVersion: v1 kind: ConfigMap metadata: nam… --- ## [Filebeat prevents python rotating log from rotating files in windows os](https://discuss.elastic.co/t/filebeat-prevents-python-rotating-log-from-rotating-files-in-windows-os/96450)
**Author:** [@Dima\_Shechtman](https://discuss.elastic.co/u/Dima_Shechtman)\ **Replies:** 8\ **Last updated:** [August 13, 2017, 6:44am UTC](https://discuss.elastic.co/t/filebeat-prevents-python-rotating-log-from-rotating-files-in-windows-os/96450 "2017-08-13T06:44:06Z")
Environment: win 10 python 2.7 filebeat 5.1.1 My application writes logs with Rotating log handler. When I start Filebeat I start getting the following exceptions from logging lib. Traceback (most recent call last): … --- ## [Packetbeat is not monitoring any network traffic!](https://discuss.elastic.co/t/packetbeat-is-not-monitoring-any-network-traffic/96403)
**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\ **Replies:** 9\ **Last updated:** [August 12, 2017, 4:08am UTC](https://discuss.elastic.co/t/packetbeat-is-not-monitoring-any-network-traffic/96403 "2017-08-12T04:08:22Z")
Hi, i’m using packetbeat 5.5.0 in my ubuntu machine. For test sake i commented out all the protocols except mysql(in my old app server), as i wanted to monitor mysql traffic in kibana. But i don’t know whats the issue a… --- ## [Instalation Metricbeat RPIs](https://discuss.elastic.co/t/instalation-metricbeat-rpis/96412)
**Author:** [@ferraricharles](https://discuss.elastic.co/u/ferraricharles)\ **Replies:** 3\ **Last updated:** [August 11, 2017, 5:44pm UTC](https://discuss.elastic.co/t/instalation-metricbeat-rpis/96412 "2017-08-11T17:44:31Z")
Hey everybody, New bee here, I’ve been trying to install the Metricbeat on my Raspberries and trying the different approaches I always have the same “exec format error”. Did some of you installed it on RPIs? And in t… --- ## [Document\_type deprecated?](https://discuss.elastic.co/t/document-type-deprecated/96441)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 7\ **Last updated:** [August 11, 2017, 3:21pm UTC](https://discuss.elastic.co/t/document-type-deprecated/96441 "2017-08-11T15:21:34Z")
Upgrading from 5.4 to 5.5, I see that document\_type in Filebeat is deprecated because \_type is going away in Elasticsearch 6.0. Not a problem, as I’m not using multiple types per index. But what do I do right now? - my… --- ## [Filebeat multiline - entire log file published as 1 long event](https://discuss.elastic.co/t/filebeat-multiline-entire-log-file-published-as-1-long-event/96716)
**Author:** [@Roy](https://discuss.elastic.co/u/Roy)\ **Replies:** 1\ **Last updated:** [August 11, 2017, 3:21pm UTC](https://discuss.elastic.co/t/filebeat-multiline-entire-log-file-published-as-1-long-event/96716 "2017-08-11T15:21:00Z")
Hi All, I’m having an issue with filebeat multiline events. All log file is being published as 1 long message. My log lines looks like: “GS category US severity…” The GS is group seperator in unicode, and filebeat r… --- ## [Filebeat.idle\_timeout VS output.elasticsearch.flush\_interval](https://discuss.elastic.co/t/filebeat-idle-timeout-vs-output-elasticsearch-flush-interval/96638)
**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\ **Replies:** 2\ **Last updated:** [August 11, 2017, 1:44pm UTC](https://discuss.elastic.co/t/filebeat-idle-timeout-vs-output-elasticsearch-flush-interval/96638 "2017-08-11T13:44:58Z")
Hi, Given the following configuration, filebeat.spool\_size: 786432 filebeat.idle\_timeout: 30s output.elasticsearch: enabled: true hosts: \["elastic-node1:9200", "elastic-node2:9200", "elastic-node3:9200"\] ... w… --- ## [Filebeats Deleted files and potentially missing data](https://discuss.elastic.co/t/filebeats-deleted-files-and-potentially-missing-data/96661)
**Author:** [@OptimusB](https://discuss.elastic.co/u/OptimusB)\ **Replies:** 0\ **Last updated:** [August 10, 2017, 7:15pm UTC](https://discuss.elastic.co/t/filebeats-deleted-files-and-potentially-missing-data/96661 "2017-08-10T19:15:44Z")
We are using filebeats to ingest log files that are rotated hourly. This is sent to a load-balanced between 4 hosts running logstash behind HA proxy. I have been tweaking with the close\_\* options as I am seeing a huge bu… --- ## [Filebeat read/extract file from shared drives/shared folder](https://discuss.elastic.co/t/filebeat-read-extract-file-from-shared-drives-shared-folder/96537)
**Author:** [@SeanKuan](https://discuss.elastic.co/u/SeanKuan)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 2:49pm UTC](https://discuss.elastic.co/t/filebeat-read-extract-file-from-shared-drives-shared-folder/96537 "2017-08-10T14:49:31Z")
hi, i would like to install FileBeat in remote server and reading/extracting file from shared drive. Is it supported or will it supported in future? --- ## [Filebeat-5.5.1 got decoding JSON with a simple json line string](https://discuss.elastic.co/t/filebeat-5-5-1-got-decoding-json-with-a-simple-json-line-string/96555)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 1\ **Last updated:** [August 10, 2017, 2:29pm UTC](https://discuss.elastic.co/t/filebeat-5-5-1-got-decoding-json-with-a-simple-json-line-string/96555 "2017-08-10T14:29:27Z")
filebeat-5.5.1 got decoding JSON with a simple json line string: echo {"id":"l7KVoUhkRWWESd9QE\_DX5Q", "timestamp":1502334971,"logtype":"event", "file":"tset.cpp", "function":"ProcMessageNew", "line":271} \>\> test.log f… --- ## [Conflict between Filebeat and Packetbeat fields](https://discuss.elastic.co/t/conflict-between-filebeat-and-packetbeat-fields/96453)
**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 2:15pm UTC](https://discuss.elastic.co/t/conflict-between-filebeat-and-packetbeat-fields/96453 "2017-08-10T14:15:33Z")
Filebeat logs have a string field called “source” which is the filepath to the file that the filebeat log is coming from. Packetbeat logs of type “flow” have an object field called"source" which has the properties ip, p… --- ## [Ingest not reading csv input as a single line](https://discuss.elastic.co/t/ingest-not-reading-csv-input-as-a-single-line/94686)
**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\ **Replies:** 13\ **Last updated:** [August 10, 2017, 12:45pm UTC](https://discuss.elastic.co/t/ingest-not-reading-csv-input-as-a-single-line/94686 "2017-08-10T12:45:45Z")
Hi, I am trying to process a csv file which has multiple lines as follows using ingest pipeline. Archive,Major Interval,DEV1,f328c29c-c695-11e5-addb-cc355a180000,CDBJVM,907047a8-5201-0000-0080-8e881e33280d,GetAdditional… --- ## [Export monitoring metrics of a \*beat via HTTP(S)](https://discuss.elastic.co/t/export-monitoring-metrics-of-a-beat-via-http-s/96128)
**Author:** [@maxmeyer](https://discuss.elastic.co/u/maxmeyer)\ **Replies:** 5\ **Last updated:** [August 10, 2017, 12:32pm UTC](https://discuss.elastic.co/t/export-monitoring-metrics-of-a-beat-via-http-s/96128 "2017-08-10T12:32:36Z")
Hey there, I’m currently working on a beat. To make it work well in an environment with quite a few logs, I would like to gather as much metrics as possible and expose them to “Prometheus”. I saw people working on sendi… --- ## [Packetbeat configtest error](https://discuss.elastic.co/t/packetbeat-configtest-error/96598)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 12:26pm UTC](https://discuss.elastic.co/t/packetbeat-configtest-error/96598 "2017-08-10T12:26:45Z")
packetbeat configtest error $ sudo ./packetbeat -configtest -e packetbeat2017/08/10 11:37:52.442668 beat.go:339: CRIT Exiting: error loading config file: stat packetbeat.yml: no such file or directory Exiting: error l… --- ## [Configure metadata sent to logstash](https://discuss.elastic.co/t/configure-metadata-sent-to-logstash/96461)
**Author:** [@jmegin](https://discuss.elastic.co/u/jmegin)\ **Replies:** 1\ **Last updated:** [August 10, 2017, 12:20pm UTC](https://discuss.elastic.co/t/configure-metadata-sent-to-logstash/96461 "2017-08-10T12:20:56Z")
I am writing a custom beat that will be sending messages to logstash. I would like to be able to add additional fields to the @metadata object received by logstash. Is this possible? I am currently using libbeat v 5.5. I… --- ## [Metricbeat process dropping](https://discuss.elastic.co/t/metricbeat-process-dropping/96454)
**Author:** [@Daniel\_Braga](https://discuss.elastic.co/u/Daniel_Braga)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 11:36am UTC](https://discuss.elastic.co/t/metricbeat-process-dropping/96454 "2017-08-10T11:36:55Z")
Hello All. I am new with elastic products. I have elastic + logstash + kibana running. My problem is related to metricbeats. On one of my nodes, is working normally, however on the other, it keeps stopping after a couple… --- ## [Mail Configuration for Heart Beat](https://discuss.elastic.co/t/mail-configuration-for-heart-beat/94284)
**Author:** [@Vineeth604](https://discuss.elastic.co/u/Vineeth604)\ **Replies:** 9\ **Last updated:** [August 10, 2017, 8:11am UTC](https://discuss.elastic.co/t/mail-configuration-for-heart-beat/94284 "2017-08-10T08:11:19Z")
I am using HeartBeat in our server to check the availability of multiple URLs and it is showing properly in Kibana. I want to get an email if an url is not available or not responding. Is there a way to configure ema… --- ## [Error 1053: "The service did not respond in a timely fashion" when attempting to start winlogbeat service](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/96489)
**Author:** [@cghigliotty](https://discuss.elastic.co/u/cghigliotty)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 9:54pm UTC](https://discuss.elastic.co/t/error-1053-the-service-did-not-respond-in-a-timely-fashion-when-attempting-to-start-winlogbeat-service/96489 "2017-08-09T21:54:27Z")
Hello all, When attempting to start the winlogbeat service in Windows I receive the following: Error 1053: “The service did not respond in a timely fashion” when attempting to start, stop or pause a service." I’ve suc… --- ## [Would file beat 6 be backwards compatible with Elastic 5?](https://discuss.elastic.co/t/would-file-beat-6-be-backwards-compatible-with-elastic-5/96020)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 2\ **Last updated:** [August 9, 2017, 12:56pm UTC](https://discuss.elastic.co/t/would-file-beat-6-be-backwards-compatible-with-elastic-5/96020 "2017-08-09T12:56:58Z")
Would love to use the new container metada with to index in my 5.x cluster :stuck\_out\_tongue: --- ## [Metricbeat output to Cloudwatch?](https://discuss.elastic.co/t/metricbeat-output-to-cloudwatch/96149)
**Author:** [@rherr63](https://discuss.elastic.co/u/rherr63)\ **Replies:** 5\ **Last updated:** [August 9, 2017, 12:43pm UTC](https://discuss.elastic.co/t/metricbeat-output-to-cloudwatch/96149 "2017-08-09T12:43:44Z")
I saw this link pertaining to Logstash. Can this be modified to send MetricBeat data to CloudWatch (and still use native AWS Cloudwatch functionality such as dashboarding, alerting, CW log events? https://www.elastic.co/… --- ## [How to use Metricbeat with Kafka](https://discuss.elastic.co/t/how-to-use-metricbeat-with-kafka/94585)
**Author:** [@rahul01](https://discuss.elastic.co/u/rahul01)\ **Replies:** 13\ **Last updated:** [August 9, 2017, 10:24am UTC](https://discuss.elastic.co/t/how-to-use-metricbeat-with-kafka/94585 "2017-08-09T10:24:57Z")
Hello All, i am using Filebeat version 5.5 to send logs to kafka topic. But I am not able to send the TOP command logs. Is there any way to send TOP command logs to Kafka? Thank You --- ## [Unable to get nginx messages to kibana through filebeat](https://discuss.elastic.co/t/unable-to-get-nginx-messages-to-kibana-through-filebeat/96024)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 14\ **Last updated:** [August 9, 2017, 11:48am UTC](https://discuss.elastic.co/t/unable-to-get-nginx-messages-to-kibana-through-filebeat/96024 "2017-08-09T11:48:47Z")
Hi Guys, I am unable to get the proper messages in elastic through filebeat. I have nginx reverse proxy with at least 50 sites catering to and I just configured or first time gave a try with ELK and filebeat. I am someh… --- ## [Make filebeat error: cannot find package "github.com/elastic/beats/filebeat/beater" in any of:](https://discuss.elastic.co/t/make-filebeat-error-cannot-find-package-github-com-elastic-beats-filebeat-beater-in-any-of/96348)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 1:50am UTC](https://discuss.elastic.co/t/make-filebeat-error-cannot-find-package-github-com-elastic-beats-filebeat-beater-in-any-of/96348 "2017-08-09T01:50:45Z")
I install the beats directory under beats-5.5.1. when i go to beats-5.5.1/filebeat, and run “make”, got the following error: go build main.go:6:2: cannot find package “github.com/elastic/beats/filebeat/beater” in any … --- ## [ERROR: Could not locate that index-pattern-field on filebeat](https://discuss.elastic.co/t/error-could-not-locate-that-index-pattern-field-on-filebeat/93380)
**Author:** [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Replies:** 17\ **Last updated:** [August 8, 2017, 7:28pm UTC](https://discuss.elastic.co/t/error-could-not-locate-that-index-pattern-field-on-filebeat/93380 "2017-08-08T19:28:41Z")
Hi All, I have installed ELK stack 5.5.0 Version and beats as of the only file beat installed on my machine. When i import file beat dashboard and visualization of 5.5.0 version, I'm getting below error while clicking … [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=505) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=507)