# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=539 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 540 --- ## [Metricbeat Docker module diskio doesn't provide IO bytes, just IO operation counts](https://discuss.elastic.co/t/metricbeat-docker-module-diskio-doesnt-provide-io-bytes-just-io-operation-counts/76232)
**Author:** [@mpereira](https://discuss.elastic.co/u/mpereira)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 12:15pm UTC](https://discuss.elastic.co/t/metricbeat-docker-module-diskio-doesnt-provide-io-bytes-just-io-operation-counts/76232 "2017-02-24T12:15:42Z")
Are there plans to implement this in the near future? --- ## [Filebeat to logstash template](https://discuss.elastic.co/t/filebeat-to-logstash-template/76044)
**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 9:56am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-template/76044 "2017-02-24T09:56:45Z")
Hi, I'm new with filebeat and I have a question about template configuration. I understand that when sending data from filebeat to elastic it is recommended to define a proper template. But, In case of data collected wit… --- ## [Delete processed log entries](https://discuss.elastic.co/t/delete-processed-log-entries/75960)
**Author:** [@f-w](https://discuss.elastic.co/u/f-w)\ **Replies:** 1\ **Last updated:** [February 24, 2017, 9:51am UTC](https://discuss.elastic.co/t/delete-processed-log-entries/75960 "2017-02-24T09:51:58Z")
Hi, Does filebeat support deleting processed log entries to make a regular log file behave like a named pipe in order to avoid filling up disk? If not, seems to be a good candidate for enhancement. --- ## [Failed to connect to console's backend](https://discuss.elastic.co/t/failed-to-connect-to-consoles-backend/75945)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 6\ **Last updated:** [February 23, 2017, 10:02pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-consoles-backend/75945 "2017-02-23T22:02:51Z")
i am getting this error failed to connect to console's backend, please check the server is up and running. any assistance is appreciated --- ## [Filebeat not fowarding to Logstash](https://discuss.elastic.co/t/filebeat-not-fowarding-to-logstash/75358)
**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\ **Replies:** 22\ **Last updated:** [February 23, 2017, 4:16pm UTC](https://discuss.elastic.co/t/filebeat-not-fowarding-to-logstash/75358 "2017-02-23T16:16:28Z")
I can't seem to get filebeat to send the logs to logstash. I'm trying to set up the elk stack on a remote ssh and visualize the logs in kibana. I've read some of the other posts, but still can't figure out the error. I h… --- ## [Monitoring other software repository download](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033)
**Author:** [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\ **Replies:** 6\ **Last updated:** [February 23, 2017, 4:15pm UTC](https://discuss.elastic.co/t/monitoring-other-software-repository-download/75033 "2017-02-23T16:15:19Z")
how to write a script to Attempts to download software from a location other than the cloud software repository. Beats --- ## [Filebeat error: File info is not identical with opened file](https://discuss.elastic.co/t/filebeat-error-file-info-is-not-identical-with-opened-file/75878)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 4:14pm UTC](https://discuss.elastic.co/t/filebeat-error-file-info-is-not-identical-with-opened-file/75878 "2017-02-23T16:14:12Z")
Hi trying to use fileebat to read some text files but getting the following error: Err: Error setting up harvester: Harvester setup failed. Unexpected file opening error: File info is not identical with opened file. Ab… --- ## [Filebeat not communicating with Logstash, is TLS required?](https://discuss.elastic.co/t/filebeat-not-communicating-with-logstash-is-tls-required/76066)
**Author:** [@Lexa](https://discuss.elastic.co/u/Lexa)\ **Replies:** 5\ **Last updated:** [February 23, 2017, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-not-communicating-with-logstash-is-tls-required/76066 "2017-02-23T16:03:09Z")
I have installed LS 5.2.1 and filebeat 5.2.1. (CentOs7) When attempting to ship via filbeat, I am getting the following error in the filebeat log. 2017-02-21T23:25:15-05:00 ERR Connecting error publishing events (retr… --- ## [Forwarding not updated CSV files](https://discuss.elastic.co/t/forwarding-not-updated-csv-files/75852)
**Author:** [@copain9](https://discuss.elastic.co/u/copain9)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 2:06pm UTC](https://discuss.elastic.co/t/forwarding-not-updated-csv-files/75852 "2017-02-23T14:06:54Z")
Hi, I have a software generating batches of logs in a CSV file once per hour. This CSV file is overwritten in one step instead of lines being appended to the previous file and is very formatted (all files are the exact… --- ## [Upstream Response Time](https://discuss.elastic.co/t/upstream-response-time/75711)
**Author:** [@usher00690](https://discuss.elastic.co/u/usher00690)\ **Replies:** 3\ **Last updated:** [February 23, 2017, 2:02pm UTC](https://discuss.elastic.co/t/upstream-response-time/75711 "2017-02-23T14:02:07Z")
Hi, I want to monitor The upstream response time, Request time on ELK. Currently the packetbeat 1.3.1 can't capture and visualize it. What need to do and how? Thanks --- ## [Filebeat Version 5.2 vs 5.0](https://discuss.elastic.co/t/filebeat-version-5-2-vs-5-0/75640)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 3\ **Last updated:** [February 23, 2017, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-version-5-2-vs-5-0/75640 "2017-02-23T14:00:49Z")
Hi, I am on Dev, and very close to Prod. I have an ELK Env version 5.0 installed with Filebeat 5.0 The Filebeat is on a Central Windows Server with Shares to Defferent Application Servers Logs Folders. I have 22 File… --- ## [Network bytes per second](https://discuss.elastic.co/t/network-bytes-per-second/76112)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 1:47pm UTC](https://discuss.elastic.co/t/network-bytes-per-second/76112 "2017-02-23T13:47:04Z")
Hi, I was looking at how I can report the byte/second that an interface doing on a server. When I look at metricbeat.network bytesin or bytesout , those are just ever increasing values until the counter is reset. How … --- ## [Running two different Filebeat Versions on same input](https://discuss.elastic.co/t/running-two-different-filebeat-versions-on-same-input/75641)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 5\ **Last updated:** [February 23, 2017, 12:52pm UTC](https://discuss.elastic.co/t/running-two-different-filebeat-versions-on-same-input/75641 "2017-02-23T12:52:38Z")
Hi, I have currently Prod using filebeat version 1.3.2, with ES Version 2.1 I am working on implementing an environment with release 5.0 Can there be any issue running on same Application Server Filebeat version 1.3.… --- ## [Can Winlogbeat output to syslog?](https://discuss.elastic.co/t/can-winlogbeat-output-to-syslog/75624)
**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\ **Replies:** 2\ **Last updated:** [February 22, 2017, 10:58pm UTC](https://discuss.elastic.co/t/can-winlogbeat-output-to-syslog/75624 "2017-02-22T22:58:20Z")
In my winlogbeat.yml file, there is a section for sending to syslog. I don't see where I configure a target IP. --- ## [Regex compiling issues](https://discuss.elastic.co/t/regex-compiling-issues/75910)
**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\ **Replies:** 2\ **Last updated:** [February 22, 2017, 9:01am UTC](https://discuss.elastic.co/t/regex-compiling-issues/75910 "2017-02-22T09:01:06Z")
Hi, I have this filebeat config: input\_type: log # Paths that should be crawled and fetched. Glob based paths. paths: - /home/ohk/data/nginx.log document\_type: nginx multiline.pattern: \['^\\b(?:\\d{1,3}.){3}\\d{1,3… --- ## [HowTo - Filebeat on OpenBSD 5.9](https://discuss.elastic.co/t/howto-filebeat-on-openbsd-5-9/74180)
**Author:** [@srikanthchandika](https://discuss.elastic.co/u/srikanthchandika)\ **Replies:** 19\ **Last updated:** [February 22, 2017, 6:31am UTC](https://discuss.elastic.co/t/howto-filebeat-on-openbsd-5-9/74180 "2017-02-22T06:31:58Z")
Hi, I am trying to setup filebeat on OpenBSD 5.9. But I am new to OpenBSD. I need help on installation and configuration. I followed this "https://discuss.elastic.co/t/filebeat-compile-on-openbsd-6-0/65145/4" procedu… --- ## [One Filebeat to two Logstashs](https://discuss.elastic.co/t/one-filebeat-to-two-logstashs/75983)
**Author:** [@Artyom\_Davydov](https://discuss.elastic.co/u/Artyom_Davydov)\ **Replies:** 1\ **Last updated:** [February 22, 2017, 6:19am UTC](https://discuss.elastic.co/t/one-filebeat-to-two-logstashs/75983 "2017-02-22T06:19:51Z")
Hi all. We have one server with filebeat (1.5) that sends messages to logstash. We need to duplicate this messages to another logstash. we are using gelf(udp). How we can do this ? thx --- ## [Passing shell script arguments to exectbeat not working](https://discuss.elastic.co/t/passing-shell-script-arguments-to-exectbeat-not-working/75693)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [February 22, 2017, 1:45am UTC](https://discuss.elastic.co/t/passing-shell-script-arguments-to-exectbeat-not-working/75693 "2017-02-22T01:45:16Z")
Hi, I have an execbeat to call a shellscript, and it works fine. In the shell script, I have modifies it to accept arguments like $1, $2 etc. So, inorder to execute my script, we need to run it in bash like; sh myscr… --- ## [ERR failed to initialize elasticsearch plugin as output](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output/75276)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 4\ **Last updated:** [February 21, 2017, 9:03pm UTC](https://discuss.elastic.co/t/err-failed-to-initialize-elasticsearch-plugin-as-output/75276 "2017-02-21T21:03:04Z")
hello can someone help me understand the problem with this Feb 14 12:25:57 localhost.localdomain systemd\[1\]: Started filebeat. Feb 14 12:25:57 localhost.localdomain systemd\[1\]: Starting filebeat... \[ctf@localhost ~\]$… --- ## [Filebeat appears to be running but not displayed on Kibana](https://discuss.elastic.co/t/filebeat-appears-to-be-running-but-not-displayed-on-kibana/73402)
**Author:** [@franc\_right](https://discuss.elastic.co/u/franc_right)\ **Replies:** 7\ **Last updated:** [February 16, 2017, 9:50pm UTC](https://discuss.elastic.co/t/filebeat-appears-to-be-running-but-not-displayed-on-kibana/73402 "2017-02-16T21:50:36Z")
Hello everyone, i have my filebeat running and queries the data but on Kibana, i am unable to get kibana to move reading from logstash to filebeat. any suggestions? --- ## [Trace Event Logs](https://discuss.elastic.co/t/trace-event-logs/75537)
**Author:** [@Dan\_Cook1](https://discuss.elastic.co/u/Dan_Cook1)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 5:43pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537 "2017-02-21T17:43:27Z")
The vast majority of useful logging on Windows is now in the ETW style trace logs. These are visible in Event Viewer under the "Applications and Service Logs". Can Heartbeat gather and ship these logs? I ask because th… --- ## [Unable to start Filebeat due to YAML config issue](https://discuss.elastic.co/t/unable-to-start-filebeat-due-to-yaml-config-issue/75875)
**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 3:47pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-due-to-yaml-config-issue/75875 "2017-02-21T15:47:48Z")
Hi I have this Filebeat configuration : - input\_type: log # Paths that should be crawled and fetched. Glob based paths. paths: - /home/ohk/data/nginx.log document\_type: nginx #line 22 multiline.pattern: \["^… --- ## [URL Check page in subdirectory](https://discuss.elastic.co/t/url-check-page-in-subdirectory/75572)
**Author:** [@misabel](https://discuss.elastic.co/u/misabel)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 2:28pm UTC](https://discuss.elastic.co/t/url-check-page-in-subdirectory/75572 "2017-02-21T14:28:40Z")
I'm getting a 404 when testing for a page that's not at the root of a site. For instance, this URL works: http://host:80 While this doesn't: http://host:80/application/Default.aspx The result of the check is a … --- ## [Filebeat not seperating events](https://discuss.elastic.co/t/filebeat-not-seperating-events/75191)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 12:59pm UTC](https://discuss.elastic.co/t/filebeat-not-seperating-events/75191 "2017-02-21T12:59:41Z")
Hi i have XML log files , each file is 1 XML line the problem is that there is no new line afetr each XML (the file ends without an Enter) so filebeat cant ship those lines beacuse he "thinks" there is no end to the even… --- ## [FIlebeat 5.0.1 crashing](https://discuss.elastic.co/t/filebeat-5-0-1-crashing/75445)
**Author:** [@Ashwani\_Gupta](https://discuss.elastic.co/u/Ashwani_Gupta)\ **Replies:** 4\ **Last updated:** [February 21, 2017, 11:31am UTC](https://discuss.elastic.co/t/filebeat-5-0-1-crashing/75445 "2017-02-21T11:31:09Z")
Hi, I have a set up of filebeat -\>logstash -\> elasticsearch on 16 core RHEL I recently upgraded my filebeat from 1.0.0 to 5.0.1 and logstash from 2.1.1 to 2.4.0 2 days back. Filebeat suddenly gets stopped twice in … --- ## [Filebeat - bulk\_max\_size means?](https://discuss.elastic.co/t/filebeat-bulk-max-size-means/75849)
**Author:** [@Suin\_You](https://discuss.elastic.co/u/Suin_You)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 10:10am UTC](https://discuss.elastic.co/t/filebeat-bulk-max-size-means/75849 "2017-02-21T10:10:58Z")
\[in logstash output config\] I read the definition of 'bulk\_max\_size' in \[filebeat output config\], but I want to know that in detail. The document says that bulk\_max\_size is 'The maximum number of events to bulk in a sing… --- ## [Report cwd in metricbeat system process](https://discuss.elastic.co/t/report-cwd-in-metricbeat-system-process/75567)
**Author:** [@mcenirm](https://discuss.elastic.co/u/mcenirm)\ **Replies:** 1\ **Last updated:** [February 21, 2017, 8:23am UTC](https://discuss.elastic.co/t/report-cwd-in-metricbeat-system-process/75567 "2017-02-21T08:23:12Z")
I need metricbeat's system process metricset to report current working directory (cwd). I have a fork at https://github.com/mcenirm/beats/tree/report\_cwd (based on v5.2.1) that passes tests https://travis-ci.org/mcenir… --- ## [Filebeat ERR - failed to publish events EOF](https://discuss.elastic.co/t/filebeat-err-failed-to-publish-events-eof/75256)
**Author:** [@rbgeno7](https://discuss.elastic.co/u/rbgeno7)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 8:20am UTC](https://discuss.elastic.co/t/filebeat-err-failed-to-publish-events-eof/75256 "2017-02-21T08:20:52Z")
I'm concerned about dataloss, because i get the following error quite often: 2017-02-15T23:58:50Z ERR Failed to publish events caused by: EOF Typically the files that I'm pushing to Logstash only get written to for 5… --- ## [Logrotate + close\_removed issue](https://discuss.elastic.co/t/logrotate-close-removed-issue/75529)
**Author:** [@byo](https://discuss.elastic.co/u/byo)\ **Replies:** 1\ **Last updated:** [February 21, 2017, 8:06am UTC](https://discuss.elastic.co/t/logrotate-close-removed-issue/75529 "2017-02-21T08:06:01Z")
Hi, I encountered the issue when using filebeat with logstash. Due to firewall configuration mistake, filebeat could not connect and send logs. After some time, the host run out of space in /var/log - filebeat was kee… --- ## [Heartbeat dashboards](https://discuss.elastic.co/t/heartbeat-dashboards/75683)
**Author:** [@redrise](https://discuss.elastic.co/u/redrise)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 7:32am UTC](https://discuss.elastic.co/t/heartbeat-dashboards/75683 "2017-02-21T07:32:55Z")
Has anybody got the example heartbeat dashboards to import correctly? When I try to import them I get an error as follows: No directory /tmp/tmp582450791/beats-dashboards-5.2.1/heartbeat/dashboard All the other bea… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=538) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=540)