# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=515 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 516 --- ## [Beats for embedded devices?](https://discuss.elastic.co/t/beats-for-embedded-devices/90989)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [June 28, 2017, 8:19am UTC](https://discuss.elastic.co/t/beats-for-embedded-devices/90989 "2017-06-28T08:19:27Z")
It might be nice for us to be able to use some Beats (particularly Metricbeat and Heartbeat but maybe others) on an embedded device with an ARM processor running Linux. However a quick look at the nightly builds for Me… --- ## [Kibana index pattern](https://discuss.elastic.co/t/kibana-index-pattern/90253)
**Author:** [@brian.sarandi](https://discuss.elastic.co/u/brian.sarandi)\ **Replies:** 3\ **Last updated:** [June 28, 2017, 6:42am UTC](https://discuss.elastic.co/t/kibana-index-pattern/90253 "2017-06-28T06:42:41Z")
i am following the instructions in https://www.elastic.co/guide/en/cloud/current/ec-beats.html number 7. load the kibana index pattern i run this command: import\_dashboards -only-index -es http://93bb827b4a16fa433486b… --- ## [Rename default output field names](https://discuss.elastic.co/t/rename-default-output-field-names/91021)
**Author:** [@hding](https://discuss.elastic.co/u/hding)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 8:05pm UTC](https://discuss.elastic.co/t/rename-default-output-field-names/91021 "2017-06-27T20:05:16Z")
Is the default Filebeat output name for log lines "message"? Can I give it a different name by configuring filebeat.yml, instead of using the rename processor in ingest node? Also, can I change the default "source" fie… --- ## [Winlogbeats with DNS logs?](https://discuss.elastic.co/t/winlogbeats-with-dns-logs/90833)
**Author:** [@xon](https://discuss.elastic.co/u/xon)\ **Replies:** 3\ **Last updated:** [June 27, 2017, 7:54pm UTC](https://discuss.elastic.co/t/winlogbeats-with-dns-logs/90833 "2017-06-27T19:54:41Z")
Hi I am looking for if it is possible to monitor the DNS logs through windows events/winlogbeat? I found this post here: https://discuss.elastic.co/t/windows-dns-diagnostic-logs/53344 and people suggest to use packetbe… --- ## [Beat compilation for musl libc / Alpine Linux / Docker containers](https://discuss.elastic.co/t/beat-compilation-for-musl-libc-alpine-linux-docker-containers/90838)
**Author:** [@inbx](https://discuss.elastic.co/u/inbx)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 8:50am UTC](https://discuss.elastic.co/t/beat-compilation-for-musl-libc-alpine-linux-docker-containers/90838 "2017-06-27T08:50:12Z")
It would be great if all beats would be compiled statically to work on musl libc distributions as well. I found (for 5.4.2) that filebeat works nicely on musl libc based distros, metricbeat requires a compatibility layer… --- ## [Difference between filebeat.modules and filebeat.prospectors](https://discuss.elastic.co/t/difference-between-filebeat-modules-and-filebeat-prospectors/90370)
**Author:** [@amarc](https://discuss.elastic.co/u/amarc)\ **Replies:** 7\ **Last updated:** [June 27, 2017, 8:40am UTC](https://discuss.elastic.co/t/difference-between-filebeat-modules-and-filebeat-prospectors/90370 "2017-06-27T08:40:08Z")
There are filebeat.modules for system, audit, apache etc. And same thing can be done using filebeat.prospectors with path: /var/log/messages etc. So what is the difference between using a module and using prospectors wit… --- ## [Does Kafka Module support the metrics here?](https://discuss.elastic.co/t/does-kafka-module-support-the-metrics-here/89979)
**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\ **Replies:** 5\ **Last updated:** [June 27, 2017, 8:21am UTC](https://discuss.elastic.co/t/does-kafka-module-support-the-metrics-here/89979 "2017-06-27T08:21:06Z")
Hi guys, I'm checking the current Kafka module can support most of the metrics listed here? https://blog.serverdensity.com/how-to-monitor-kafka/ I'm asking this in the elastic web site I cannot see those in the Expor… --- ## [Metricbeat Aggs fail after adding Index Routing](https://discuss.elastic.co/t/metricbeat-aggs-fail-after-adding-index-routing/86491)
**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\ **Replies:** 4\ **Last updated:** [June 27, 2017, 5:38am UTC](https://discuss.elastic.co/t/metricbeat-aggs-fail-after-adding-index-routing/86491 "2017-06-27T05:38:35Z")
Earlier this week, I updated my v 5.3.2 cluster configuration for Hot/Warm Architecture. I added "index.routing.allocation.require.box\_type": "hot" to all existing daily indices then updated my logstash and metricbeat … --- ## [Why Oh Why Oh Why will Metricbeat failing to connect to elasticsearch?](https://discuss.elastic.co/t/why-oh-why-oh-why-will-metricbeat-failing-to-connect-to-elasticsearch/90870)
**Author:** [@twelsh37](https://discuss.elastic.co/u/twelsh37)\ **Replies:** 7\ **Last updated:** [June 26, 2017, 9:09pm UTC](https://discuss.elastic.co/t/why-oh-why-oh-why-will-metricbeat-failing-to-connect-to-elasticsearch/90870 "2017-06-26T21:09:11Z")
I have just installed elasticsearch, kibana and logstash. This is my first installation so please be kind. ES, Kibana, Logstash and metricbeat are all v5.4.2 OS Centos 6.9 metricbeat installed from RPM ES,Kibana, Logst… --- ## [Kafka Bug?](https://discuss.elastic.co/t/kafka-bug/90682)
**Author:** [@StivOstenberg](https://discuss.elastic.co/u/StivOstenberg)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 4:49pm UTC](https://discuss.elastic.co/t/kafka-bug/90682 "2017-06-26T16:49:33Z")
We are trying unsuccessfully to connect Filebeat to Kafka using SSL. We have dropped Kafka back to the "supported" version, and still we fail. In the course of troubleshooting, we found the following :slight\_smile: 1: … --- ## [Can journalbeat monitor journal entries from remote machines?](https://discuss.elastic.co/t/can-journalbeat-monitor-journal-entries-from-remote-machines/90686)
**Author:** [@holt](https://discuss.elastic.co/u/holt)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 3:04pm UTC](https://discuss.elastic.co/t/can-journalbeat-monitor-journal-entries-from-remote-machines/90686 "2017-06-26T15:04:24Z")
Want to have multiple machines using systemd-journal-remote feeding a single machine running systemd-journal-remote, then have journalbeat running on that single machine. (An alternative to running journalbeat on the rem… --- ## [Journalbeat install failing](https://discuss.elastic.co/t/journalbeat-install-failing/90684)
**Author:** [@holt](https://discuss.elastic.co/u/holt)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 3:02pm UTC](https://discuss.elastic.co/t/journalbeat-install-failing/90684 "2017-06-26T15:02:34Z")
journalbeat install failing with: go get github.com/mheese/journalbeat package context: unrecognized import path "context" (import path does not begin with hostname) Downloads OK, but something is messed up somewhere… --- ## [Adjustment of reload.period according to log retention period](https://discuss.elastic.co/t/adjustment-of-reload-period-according-to-log-retention-period/90774)
**Author:** [@st1t](https://discuss.elastic.co/u/st1t)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 11:57am UTC](https://discuss.elastic.co/t/adjustment-of-reload-period-according-to-log-retention-period/90774 "2017-06-26T11:57:37Z")
Hi guys, I'd like to adjust reload.period according to the period of metricbeat data, is not there a good idea? For example, the following pattern. · Data within seven days hold data at reload.period in 1 second · Ma… --- ## [Filebeat supports binary log file input?](https://discuss.elastic.co/t/filebeat-supports-binary-log-file-input/90689)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 11:36am UTC](https://discuss.elastic.co/t/filebeat-supports-binary-log-file-input/90689 "2017-06-26T11:36:15Z")
Dear Filebeat team, We set up Filebeat to tail local log files. I am wondering by any chance Filebeat supports binary file format or it needs to see "\\n" as a deliminator for a new log message. Thanks! yan --- ## [Issues while connecting to HTTPS elastic search url from filebeat](https://discuss.elastic.co/t/issues-while-connecting-to-https-elastic-search-url-from-filebeat/90519)
**Author:** [@Hanciv](https://discuss.elastic.co/u/Hanciv)\ **Replies:** 3\ **Last updated:** [June 26, 2017, 11:32am UTC](https://discuss.elastic.co/t/issues-while-connecting-to-https-elastic-search-url-from-filebeat/90519 "2017-06-26T11:32:39Z")
Hi, I am trying to send my log messages to AWS Elastic search service which is resising in HTTPS. Below is the configuration I have given in filebeat: output.elasticsearch: # Array of hosts to connect to. hosts: … --- ## [Filebeats and Kafka versions](https://discuss.elastic.co/t/filebeats-and-kafka-versions/90677)
**Author:** [@StivOstenberg](https://discuss.elastic.co/u/StivOstenberg)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 11:19am UTC](https://discuss.elastic.co/t/filebeats-and-kafka-versions/90677 "2017-06-26T11:19:04Z")
When will 10.2.0 be supported? We were able to connect to it by lying about the version, but then SSL failed when we tried to enable. We are dropping back to a supported version, but causing some dependency ripples . --- ## [Example Dashboards - Via Logstash](https://discuss.elastic.co/t/example-dashboards-via-logstash/90662)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 11:06am UTC](https://discuss.elastic.co/t/example-dashboards-via-logstash/90662 "2017-06-26T11:06:41Z")
Hello, I have been reading through various threads in regards to the example dashboards showing "no data found" when logs are being pushed via logstash instead of directly to elasticsearch which begs the question if all … --- ## [The filebeat dashboard : No results found](https://discuss.elastic.co/t/the-filebeat-dashboard-no-results-found/89479)
**Author:** [@Amna\_sayed\_ali](https://discuss.elastic.co/u/Amna_sayed_ali)\ **Replies:** 13\ **Last updated:** [June 26, 2017, 10:59am UTC](https://discuss.elastic.co/t/the-filebeat-dashboard-no-results-found/89479 "2017-06-26T10:59:56Z")
Hello, i have 2 Servers (one is ELK and other is filebeat ) both are Centos 7. i have installed ELK 5.4 "tar installation" on 1st server and filebeat 5.4 "tar installation" on 2nd server. i can see the log index in my… --- ## [Filebeat/logstash installation and configuration](https://discuss.elastic.co/t/filebeat-logstash-installation-and-configuration/88797)
**Author:** [@richagautam](https://discuss.elastic.co/u/richagautam)\ **Replies:** 3\ **Last updated:** [June 26, 2017, 5:52am UTC](https://discuss.elastic.co/t/filebeat-logstash-installation-and-configuration/88797 "2017-06-26T05:52:19Z")
Hi, I have to install and configure filebeat and logstash in CentOS7 OS for an assingment. Filebeat will be on one server and logstash will be on another server i.e both will be on different server. I am planning t… --- ## [ERR Failed to publish events caused by: read tcp IP:40634-\>IP:5044: i/o timeout](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-ip-40634-ip-5044-i-o-timeout/90355)
**Author:** [@cazyfunlover](https://discuss.elastic.co/u/cazyfunlover)\ **Replies:** 6\ **Last updated:** [June 25, 2017, 4:40pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-read-tcp-ip-40634-ip-5044-i-o-timeout/90355 "2017-06-25T16:40:11Z")
Hello , I am seeing error -- ERR Failed to publish events caused by: read tcp INFO Error publishing events (retrying): read tcp filebeat.prospectors: - input\_type: log # Paths that should be crawled and fetched.… --- ## [Filebeat can't fetch the noeol(no end-of-line) file](https://discuss.elastic.co/t/filebeat-cant-fetch-the-noeol-no-end-of-line-file/90579)
**Author:** [@huzhengkai](https://discuss.elastic.co/u/huzhengkai)\ **Replies:** 2\ **Last updated:** [June 24, 2017, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-cant-fetch-the-noeol-no-end-of-line-file/90579 "2017-06-24T13:35:14Z")
Forgive my poor English,I'm a chinese.I use the filebeat 5.2.0,our system is Linux 2.6.32-431.el6.x86\_64.My colleague keep generating many new files by the Spring.All those file have only one line of data(json). When v… --- ## [Filebeat on Ubuntu](https://discuss.elastic.co/t/filebeat-on-ubuntu/90636)
**Author:** [@Pandiyan\_M](https://discuss.elastic.co/u/Pandiyan_M)\ **Replies:** 3\ **Last updated:** [June 23, 2017, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-on-ubuntu/90636 "2017-06-23T15:34:48Z")
Hi, I have done ELK 5.4 on Centos and set up filebeats on ubuntu as below wget -qO – https://packages.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add – # echo ‘deb https://packages.elastic.co/beats/apt stable ma… --- ## [Filebeat and parsing](https://discuss.elastic.co/t/filebeat-and-parsing/90295)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [June 23, 2017, 12:10pm UTC](https://discuss.elastic.co/t/filebeat-and-parsing/90295 "2017-06-23T12:10:53Z")
Hi All, I have text files in my windows machine ,so i have filebeat in to it to send me the data to logstash,and am receiving the data my logstash conf look like this input { beats { port =\> 5143 tags =\> … --- ## [ERR Connecting error publishing events (retrying): Get http://xx.xx.xx.xx:5044: net/http: request canceled while waiting for connection](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-get-http-xx-xx-xx-xx-5044-net-http-request-canceled-while-waiting-for-connection/90621)
**Author:** [@DharaniKumar](https://discuss.elastic.co/u/DharaniKumar)\ **Replies:** 5\ **Last updated:** [June 23, 2017, 11:47am UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-get-http-xx-xx-xx-xx-5044-net-http-request-canceled-while-waiting-for-connection/90621 "2017-06-23T11:47:12Z")
This is what im getting when i tried to connect filebeat to logstash. Can someone tell me what kind of issue is this. In my point of view im thinking its about port issue. I dont know i may be wrong. Some one take a look… --- ## [Filebeat config error while configtest](https://discuss.elastic.co/t/filebeat-config-error-while-configtest/90602)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 1\ **Last updated:** [June 23, 2017, 10:25am UTC](https://discuss.elastic.co/t/filebeat-config-error-while-configtest/90602 "2017-06-23T10:25:23Z")
root@dev01:/usr/share/filebeat/bin# ./filebeat -configtest -e filebeat2017/06/23 09:06:57.152936 beat.go:339: CRIT Exiting: error loading config file: stat filebeat.yml: no such file or directory Exiting: error loading c… --- ## [Linux binaries for ARM](https://discuss.elastic.co/t/linux-binaries-for-arm/90531)
**Author:** [@andresbh](https://discuss.elastic.co/u/andresbh)\ **Replies:** 0\ **Last updated:** [June 22, 2017, 8:02pm UTC](https://discuss.elastic.co/t/linux-binaries-for-arm/90531 "2017-06-22T20:02:34Z")
could you provide a linux binary for ARM boards. something like influxdb does, for that see https://dl.influxdata.com/telegraf/releases/telegraf-1.3.2\_linux\_armhf.tar.gz cheers andres --- ## [Not able to run filebeat instance remotely](https://discuss.elastic.co/t/not-able-to-run-filebeat-instance-remotely/90493)
**Author:** [@raazeev64](https://discuss.elastic.co/u/raazeev64)\ **Replies:** 0\ **Last updated:** [June 22, 2017, 3:49pm UTC](https://discuss.elastic.co/t/not-able-to-run-filebeat-instance-remotely/90493 "2017-06-22T15:49:30Z")
I have been trying to run filebeat remotely spawning it through a ssh session. Below is the call I use to invoke it ssh user@host 'cd ./filebeat-5.3.2; ./filebeat -e -c ./filebeat.yml & disown' This does run filebeat … --- ## [Service restart/stop won't work after upgrade](https://discuss.elastic.co/t/service-restart-stop-wont-work-after-upgrade/90446)
**Author:** [@jknaack](https://discuss.elastic.co/u/jknaack)\ **Replies:** 0\ **Last updated:** [June 22, 2017, 11:49am UTC](https://discuss.elastic.co/t/service-restart-stop-wont-work-after-upgrade/90446 "2017-06-22T11:49:10Z")
After installing filebeat updates on Ubuntu 14.04 servers, "service filebeat stop" isn't working immediately after upgrading. The processes filebeat-god and filebeat stay running although pid-file is correct. A serv… --- ## [Giving WinSCP log file as input to filebeat](https://discuss.elastic.co/t/giving-winscp-log-file-as-input-to-filebeat/90034)
**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\ **Replies:** 3\ **Last updated:** [June 22, 2017, 10:20am UTC](https://discuss.elastic.co/t/giving-winscp-log-file-as-input-to-filebeat/90034 "2017-06-22T10:20:32Z")
I want to give log file from WinSCP as input to Filebeat. Is it possible? If yes, how do I do it? --- ## [Metricbeat to logstash tcp i/o errors - 5.4.1](https://discuss.elastic.co/t/metricbeat-to-logstash-tcp-i-o-errors-5-4-1/89992)
**Author:** [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)\ **Replies:** 8\ **Last updated:** [June 22, 2017, 9:58am UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-tcp-i-o-errors-5-4-1/89992 "2017-06-22T09:58:59Z")
Hi There, I have been investigating this issue for a while now and I have seen lots of topics on here about it but so far nothing is working for me, either old beat version or different architecture/components used. Th… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=514) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=516)