# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=553 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 554 --- ## [How to visualize Disk IO](https://discuss.elastic.co/t/how-to-visualize-disk-io/66720)
**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 12:16pm UTC](https://discuss.elastic.co/t/how-to-visualize-disk-io/66720 "2016-11-22T12:16:42Z")
Hello, How can I visualize Disk io with metricbeat in Kibana. I saw the post about timelion, but.. Isn't there another way to do this? So I can add this visualisation to the metricbeats Filesystem dashboard? --- ## [Is Filebeat, Log courier and logstash supported for CentOS RHEL 5?](https://discuss.elastic.co/t/is-filebeat-log-courier-and-logstash-supported-for-centos-rhel-5/66740)
**Author:** [@ajeevpk](https://discuss.elastic.co/u/ajeevpk)\ **Replies:** 8\ **Last updated:** [November 21, 2016, 7:17pm UTC](https://discuss.elastic.co/t/is-filebeat-log-courier-and-logstash-supported-for-centos-rhel-5/66740 "2016-11-21T19:17:07Z")
Hi , I want a light weight log forwarder in RHEL5 machine, looks like Filebeat, Log courier and logstash NOT supported for CentOS RHEL 5. Can some one help me resolve this error \[root@ctp-fcpld1app11 ~\]# service file… --- ## [Winlogbeat not able to send data to elastic (401 Unauthorized)](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-data-to-elastic-401-unauthorized/66580)
**Author:** [@alvaroca1](https://discuss.elastic.co/u/alvaroca1)\ **Replies:** 7\ **Last updated:** [November 21, 2016, 6:55pm UTC](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-data-to-elastic-401-unauthorized/66580 "2016-11-21T18:55:19Z")
\\winlogbeat\> .\\winlogbeat.exe -c '.\\winlogbeat.yml' -e -v 11/17 19:45:16.781950 beat.go:264: INFO Home path: \[C:\\winlogbeat\] Config path: \[C:\\winlogbeat\] Data path: \[C:\\winlogbeat\\data\] Logs path: \[C:\\winlogbeat\\logs\] 1… --- ## [Topbeat: FATAL: kernel too old](https://discuss.elastic.co/t/topbeat-fatal-kernel-too-old/35769)
**Author:** [@arul\_1440](https://discuss.elastic.co/u/arul_1440)\ **Replies:** 6\ **Last updated:** [November 21, 2016, 5:41pm UTC](https://discuss.elastic.co/t/topbeat-fatal-kernel-too-old/35769 "2016-11-21T17:41:26Z")
I am tying to install topbeat on RHEL 5.10 which is running on kernal version 2.6, but I get a sementation fault has kernal too old? bash-4.2# /etc/init.d/topbeat Usage: /etc/init.d/topbeat {start|stop|status|restart|… --- ## [Windows xp filebeat crash](https://discuss.elastic.co/t/windows-xp-filebeat-crash/66641)
**Author:** [@superzbo](https://discuss.elastic.co/u/superzbo)\ **Replies:** 3\ **Last updated:** [November 21, 2016, 1:31pm UTC](https://discuss.elastic.co/t/windows-xp-filebeat-crash/66641 "2016-11-21T13:31:24Z")
hi I try to install filebeats on windows xp, many servers some of them working fine, some crash when start the service. I got two types of error from different servers, appreciate any guide point me some direction to f… --- ## [How to ship to Amazon Kinesis stream using Filebeat?](https://discuss.elastic.co/t/how-to-ship-to-amazon-kinesis-stream-using-filebeat/66677)
**Author:** [@Rinin](https://discuss.elastic.co/u/Rinin)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 1:08pm UTC](https://discuss.elastic.co/t/how-to-ship-to-amazon-kinesis-stream-using-filebeat/66677 "2016-11-21T13:08:34Z")
I want to ship logs from on premise servers to Amazon Kinesis Steams using Filebeat . I don't intend to use logstash as i don't have any prior transformation . Is it possible to connect to Kinesis Streams Directly ? --- ## [Is there a Beat that reads from DynamoDB?](https://discuss.elastic.co/t/is-there-a-beat-that-reads-from-dynamodb/66434)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 6\ **Last updated:** [November 18, 2016, 6:05pm UTC](https://discuss.elastic.co/t/is-there-a-beat-that-reads-from-dynamodb/66434 "2016-11-18T18:05:44Z")
I am currently using logstash plugin to sync data from AWS dynamodb, is it possible to use one of the beats products to accomplish the same thing? --- ## [Multiline read in filebeat](https://discuss.elastic.co/t/multiline-read-in-filebeat/66365)
**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\ **Replies:** 15\ **Last updated:** [November 18, 2016, 3:42pm UTC](https://discuss.elastic.co/t/multiline-read-in-filebeat/66365 "2016-11-18T15:42:21Z")
I have a custom log file which has multiple lines getting logged to it. All those multiple lines do not have any similar pattern to it. Those multilines are random. Which or rather what kind of parser or anything should … --- ## [Include files inside filebeat config file](https://discuss.elastic.co/t/include-files-inside-filebeat-config-file/66518)
**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\ **Replies:** 5\ **Last updated:** [November 18, 2016, 3:38pm UTC](https://discuss.elastic.co/t/include-files-inside-filebeat-config-file/66518 "2016-11-18T15:38:07Z")
I have 100 log files and I want to read those files, put some fields to it and send it to logstash. If I create say 100 different prospectors all in one config file, it becomes very difficult to manage. Therefore, i want… --- ## [Redis Output](https://discuss.elastic.co/t/redis-output/66511)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 3:31pm UTC](https://discuss.elastic.co/t/redis-output/66511 "2016-11-18T15:31:20Z")
Hi, I have just seen the new output options for Beats. I would like to know if two parameters will be adding in the future for Redis, they are: congestion\_interval congestion\_threshold From my point of view, I th… --- ## [Filebeat not sending through ingest pipeline - CURL does](https://discuss.elastic.co/t/filebeat-not-sending-through-ingest-pipeline-curl-does/66427)
**Author:** [@GaryS](https://discuss.elastic.co/u/GaryS)\ **Replies:** 2\ **Last updated:** [November 18, 2016, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-through-ingest-pipeline-curl-does/66427 "2016-11-18T14:13:02Z")
I have created a Ingest pipeline for my logs. Filebeat is sending the logs to Elasticsearch, but they are not going through the Ingest Pipeline, and I am just getting the raw message rather than the structured fields. … --- ## [Diskio growth additionally to total values](https://discuss.elastic.co/t/diskio-growth-additionally-to-total-values/66531)
**Author:** [@kaem2111](https://discuss.elastic.co/u/kaem2111)\ **Replies:** 1\ **Last updated:** [November 18, 2016, 2:05pm UTC](https://discuss.elastic.co/t/diskio-growth-additionally-to-total-values/66531 "2016-11-18T14:05:12Z")
Hi all, when visualizing system.diskio.read.bytes I get only a growing chart of total bytes. This is not very handsome. I need a growth in read.bytes per rtt-interval (round trip time). Is there any of the followin… --- ## [Visualizing Disk IO through Kibana 5 and Metric Beat](https://discuss.elastic.co/t/visualizing-disk-io-through-kibana-5-and-metric-beat/66513)
**Author:** [@abhimanyunagrath](https://discuss.elastic.co/u/abhimanyunagrath)\ **Replies:** 1\ **Last updated:** [November 18, 2016, 1:57pm UTC](https://discuss.elastic.co/t/visualizing-disk-io-through-kibana-5-and-metric-beat/66513 "2016-11-18T13:57:30Z")
Hi, I am new to metric beat and I want to visualize Disk IO operations of each disk .I am getting various parameters like(system.diskio.read.bytes , system.diskio.write.bytes , system.diskio.read.counts , system.diskio… --- ## [Filebeat holds access to deleted/rotated files and impact disk space stats](https://discuss.elastic.co/t/filebeat-holds-access-to-deleted-rotated-files-and-impact-disk-space-stats/66280)
**Author:** [@mt.michael](https://discuss.elastic.co/u/mt.michael)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 1:13pm UTC](https://discuss.elastic.co/t/filebeat-holds-access-to-deleted-rotated-files-and-impact-disk-space-stats/66280 "2016-11-18T13:13:26Z")
Hi. We're using filebeat version 1.2.3 (amd64) on Ubuntu 12.04.5 LTS server. We are using logrotate to rotate files (20 unique file names) hourly. So filebeat should monitor files with $filenames.log and $filenames.log… --- ## [Deleting the registry file](https://discuss.elastic.co/t/deleting-the-registry-file/66301)
**Author:** [@rlonberg](https://discuss.elastic.co/u/rlonberg)\ **Replies:** 1\ **Last updated:** [November 18, 2016, 11:48am UTC](https://discuss.elastic.co/t/deleting-the-registry-file/66301 "2016-11-18T11:48:01Z")
What are the consequences of deleting the filebeat registry file? Will filebeat simply create a new blank registry file upon the next restart and reset its markers on all log files? Running filebeat on Windows, I notic… --- ## [How to forward and index the json formatted log files in ELK-docker](https://discuss.elastic.co/t/how-to-forward-and-index-the-json-formatted-log-files-in-elk-docker/65509)
**Author:** [@himaz.m](https://discuss.elastic.co/u/himaz.m)\ **Replies:** 6\ **Last updated:** [November 18, 2016, 8:13am UTC](https://discuss.elastic.co/t/how-to-forward-and-index-the-json-formatted-log-files-in-elk-docker/65509 "2016-11-18T08:13:25Z")
Hi, I'm configuring the ELK-docker for the first time and this is new to me. I'm using, \* filebeat version 5.0 \* elasticsearch version 5.0 \* kibana version 5.0 I have filebeat configured on a different server and ELK-… --- ## [Packetbeat does not capture traffic of MySQL's method:select on Windows](https://discuss.elastic.co/t/packetbeat-does-not-capture-traffic-of-mysqls-method-select-on-windows/66321)
**Author:** [@White\_Tong](https://discuss.elastic.co/u/White_Tong)\ **Replies:** 0\ **Last updated:** [November 17, 2016, 3:25am UTC](https://discuss.elastic.co/t/packetbeat-does-not-capture-traffic-of-mysqls-method-select-on-windows/66321 "2016-11-17T03:25:08Z")
Dear all, Shortly before, I installed Npcap on Windows. In addition to the traffic of select, packetbeat can capture most traffic of mysql . Even if the traffic was marked "select" could be captured, its status is error… --- ## [Why does syslog create a user.log when filebeat is restarted?](https://discuss.elastic.co/t/why-does-syslog-create-a-user-log-when-filebeat-is-restarted/66134)
**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\ **Replies:** 4\ **Last updated:** [November 17, 2016, 4:02pm UTC](https://discuss.elastic.co/t/why-does-syslog-create-a-user-log-when-filebeat-is-restarted/66134 "2016-11-17T16:02:54Z")
Hello, I have experienced something a bit weird for me. I have filebeat monitoring my rsyslog (syslog.log) file and sending it to my logstash. I have noticed that after restarting filebeat where syslog is running, sy… --- ## [Exist 43 child process of filebeat, is it normal?](https://discuss.elastic.co/t/exist-43-child-process-of-filebeat-is-it-normal/65450)
**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\ **Replies:** 3\ **Last updated:** [November 17, 2016, 1:25pm UTC](https://discuss.elastic.co/t/exist-43-child-process-of-filebeat-is-it-normal/65450 "2016-11-17T13:25:47Z")
their is only one log file to ship (and this log file will logrotate by day) and send to kafka with 10 partitions , but have so many child process. Is it normal? why filebeat create so many child process? pstree -p |g… --- ## [Filebeat detects file but keeps offset in 0](https://discuss.elastic.co/t/filebeat-detects-file-but-keeps-offset-in-0/66248)
**Author:** [@txisme](https://discuss.elastic.co/u/txisme)\ **Replies:** 4\ **Last updated:** [November 17, 2016, 10:34am UTC](https://discuss.elastic.co/t/filebeat-detects-file-but-keeps-offset-in-0/66248 "2016-11-17T10:34:22Z")
Hey, recently i had a problem with elasticsearch where all shards were with RED flag. So i deleted everything from ES, deleted registry of filebeat and restarted everything. Right now the data is not being indexed in E… --- ## [Filebeat service could not start](https://discuss.elastic.co/t/filebeat-service-could-not-start/66079)
**Author:** [@VijayKarthikeyan](https://discuss.elastic.co/u/VijayKarthikeyan)\ **Replies:** 9\ **Last updated:** [November 17, 2016, 9:22am UTC](https://discuss.elastic.co/t/filebeat-service-could-not-start/66079 "2016-11-17T09:22:54Z")
Hi, Am using filebeat to read log files and stash it in elasticsearch. But am not able to start the service of filebeat. As am new to ELK, I followed the instructions given in the guide and it says the below command … --- ## [MetricBeat Vs Nagios](https://discuss.elastic.co/t/metricbeat-vs-nagios/66213)
**Author:** [@abhimanyunagrath](https://discuss.elastic.co/u/abhimanyunagrath)\ **Replies:** 5\ **Last updated:** [November 17, 2016, 8:11am UTC](https://discuss.elastic.co/t/metricbeat-vs-nagios/66213 "2016-11-17T08:11:26Z")
Hi, I am looking for a server monitoring tools and after couple of POCS finalized two tools 1. Nagios 2. Elastic Beats Just I am surprised I am not able to find out any comparison between the two anywhere .So just wanted… --- ## [Metricbeat on one of my Windows servers fails to start](https://discuss.elastic.co/t/metricbeat-on-one-of-my-windows-servers-fails-to-start/66241)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 6\ **Last updated:** [November 16, 2016, 3:33pm UTC](https://discuss.elastic.co/t/metricbeat-on-one-of-my-windows-servers-fails-to-start/66241 "2016-11-16T15:33:33Z")
I am running MetricBeat on about 30 Windows servers, and on one of them it's having trouble. Running it manually seems to work fine, although I get a whole bunch of "Skip process pid" messages due to missing pids, but I … --- ## [Monitoring Redis Server with Metricbeat](https://discuss.elastic.co/t/monitoring-redis-server-with-metricbeat/66235)
**Author:** [@abhimanyunagrath](https://discuss.elastic.co/u/abhimanyunagrath)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 3:09pm UTC](https://discuss.elastic.co/t/monitoring-redis-server-with-metricbeat/66235 "2016-11-16T15:09:54Z")
Hi, I am using Redis 2.8 and MySQL 5.5.42 in production .So can I use metric beat to monitoring Redis cluster & MySql server.If not the can you suggest any alternative beat . I am having the latest version of Elastic St… --- ## [Winlogbeat 1.x works fine but can't get 5 up](https://discuss.elastic.co/t/winlogbeat-1-x-works-fine-but-cant-get-5-up/66245)
**Author:** [@seanthebear](https://discuss.elastic.co/u/seanthebear)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 2:48pm UTC](https://discuss.elastic.co/t/winlogbeat-1-x-works-fine-but-cant-get-5-up/66245 "2016-11-16T14:48:53Z")
Hi First post - trying to set up winlogbeat on Server 2012 R2. I'm able to get the older version to function but V5 seems to fall over because I can't load the template. Powershell is a no go it seems but running curl… --- ## [Packetbeat for Windows does not capture TCP port data.?](https://discuss.elastic.co/t/packetbeat-for-windows-does-not-capture-tcp-port-data/44965)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 11\ **Last updated:** [November 16, 2016, 11:22am UTC](https://discuss.elastic.co/t/packetbeat-for-windows-does-not-capture-tcp-port-data/44965 "2016-11-16T11:22:23Z")
Dear Team, Basis the link below Packetbeat does not capture packets on TCP port on Windows. and current issue I am facing on my local instance is that packet beat does not capture TCP port Windows7 64bit packe… --- ## [How to import the Beats Kibana dashboards offline into elasticsearch](https://discuss.elastic.co/t/how-to-import-the-beats-kibana-dashboards-offline-into-elasticsearch/66130)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 10:28am UTC](https://discuss.elastic.co/t/how-to-import-the-beats-kibana-dashboards-offline-into-elasticsearch/66130 "2016-11-16T10:28:40Z")
I am looking for a option to import the beats kibana dashboards (https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.0.0.zip) offline using the ./scripts/import\_dashboards scripts. --- ## [Don't send log to Elastic search](https://discuss.elastic.co/t/dont-send-log-to-elastic-search/65787)
**Author:** [@jyp](https://discuss.elastic.co/u/jyp)\ **Replies:** 8\ **Last updated:** [November 16, 2016, 9:12am UTC](https://discuss.elastic.co/t/dont-send-log-to-elastic-search/65787 "2016-11-16T09:12:53Z")
Now, we use logging system on ELK (filebeat \> kafka \> logstash\> elasticsearch/kibana) But we restart server on elasticsearch(=ES) recently. I don't know why I can search only log file after when elasticsearch restart, … --- ## [File pattern for prospect paths](https://discuss.elastic.co/t/file-pattern-for-prospect-paths/66196)
**Author:** [@Srinivas\_Chamarthi](https://discuss.elastic.co/u/Srinivas_Chamarthi)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 4:47am UTC](https://discuss.elastic.co/t/file-pattern-for-prospect-paths/66196 "2016-11-16T04:47:23Z")
Hi, I want to use the following regex for a prospect path pattern "/logs/\*/\*/\[a-zA-Z\]+.log" for any log files with application.log or error.log but not "application\_12333.log" files. but somehow I don't see any of… --- ## [Listening on multiple (but not all) interfaces?](https://discuss.elastic.co/t/listening-on-multiple-but-not-all-interfaces/66139)
**Author:** [@gyre](https://discuss.elastic.co/u/gyre)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 12:17am UTC](https://discuss.elastic.co/t/listening-on-multiple-but-not-all-interfaces/66139 "2016-11-16T00:17:58Z")
Folks, is it possible to listen on more than one, but not all interfaces on Linux? I've tried naming the interfaces as an array... as a comma or space separated list. Neither works. At the moment, I'm running multipl… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=552) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=554)