# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=567 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 568 --- ## [Run packetbeat on ubuntu error](https://discuss.elastic.co/t/run-packetbeat-on-ubuntu-error/57542)
**Author:** [@617726909](https://discuss.elastic.co/u/617726909)\ **Replies:** 1\ **Last updated:** [August 9, 2016, 8:46am UTC](https://discuss.elastic.co/t/run-packetbeat-on-ubuntu-error/57542 "2016-08-09T08:46:45Z")
OS: Ubuntu 12.04.2 LTS (GNU/Linux 3.5.0-23-generic i686) version:packetbeat-1.2.3-x86\_64 cmd:sudo ./packetbeat -e -c packetbeat.yml -d "publish" error: ./packetbeat: 1: ./packetbeat: Syntax error: word unexpected (expec… --- ## [Winlogbeat message\_error: "The system cannot find the file specified."](https://discuss.elastic.co/t/winlogbeat-message-error-the-system-cannot-find-the-file-specified/48125)
**Author:** [@Markus\_Korn](https://discuss.elastic.co/u/Markus_Korn)\ **Replies:** 12\ **Last updated:** [August 9, 2016, 7:43am UTC](https://discuss.elastic.co/t/winlogbeat-message-error-the-system-cannot-find-the-file-specified/48125 "2016-08-09T07:43:08Z")
Hi, we have a lot of Windows Systems which are forwarding all their events to a central window system. From their I want to move the messages to logstash by using WinLogBeat. It works fine for all "Windows OS" Even… --- ## [How to define multiple indexes for different logs in Filebeat and Logstash?](https://discuss.elastic.co/t/how-to-define-multiple-indexes-for-different-logs-in-filebeat-and-logstash/57498)
**Author:** [@daiyue](https://discuss.elastic.co/u/daiyue)\ **Replies:** 1\ **Last updated:** [August 9, 2016, 4:10am UTC](https://discuss.elastic.co/t/how-to-define-multiple-indexes-for-different-logs-in-filebeat-and-logstash/57498 "2016-08-09T04:10:16Z")
Hi, I have configured a log server, i.e. Filebeat -\> Logstash -\> Elasticsearch -\> Kibana. I am wondering how to create separated indexes for different logs (fetched using Filebeat) in logstash (which were later passed on… --- ## [Filebeat is still sending logs to logstash, even curl ssl is failing](https://discuss.elastic.co/t/filebeat-is-still-sending-logs-to-logstash-even-curl-ssl-is-failing/56709)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 13\ **Last updated:** [August 9, 2016, 3:28am UTC](https://discuss.elastic.co/t/filebeat-is-still-sending-logs-to-logstash-even-curl-ssl-is-failing/56709 "2016-08-09T03:28:55Z")
Hi, I ran into a strange problem with filebeat. I have filebeat monitoring logs in mulitple instances shipping them to central logstash. After few days, some of those filebeat dropped connection to logstash and i couldnt… --- ## [WIndows 2003 - Winlogbeat x32 alpha4](https://discuss.elastic.co/t/windows-2003-winlogbeat-x32-alpha4/57386)
**Author:** [@BongoEADGC6](https://discuss.elastic.co/u/BongoEADGC6)\ **Replies:** 3\ **Last updated:** [August 8, 2016, 6:56pm UTC](https://discuss.elastic.co/t/windows-2003-winlogbeat-x32-alpha4/57386 "2016-08-08T18:56:03Z")
I'm having an issue where all the fields under event\_data are named param1, param2, param3, param4, etc. This does not happen when using the x64 version of the software however. Is there a compatibility issue with Wind… --- ## [Erroneous / Missing Process List](https://discuss.elastic.co/t/erroneous-missing-process-list/57408)
**Author:** [@MarkGavalda](https://discuss.elastic.co/u/MarkGavalda)\ **Replies:** 2\ **Last updated:** [August 8, 2016, 2:43pm UTC](https://discuss.elastic.co/t/erroneous-missing-process-list/57408 "2016-08-08T14:43:54Z")
Seems like a serious issue. I just installed Topbeat, pointed it at the ES cluster and only the CPU Load chart works... --- ## [How to test performance of filebeat](https://discuss.elastic.co/t/how-to-test-performance-of-filebeat/57130)
**Author:** [@Nipun\_Ahuja](https://discuss.elastic.co/u/Nipun_Ahuja)\ **Replies:** 2\ **Last updated:** [August 8, 2016, 12:56pm UTC](https://discuss.elastic.co/t/how-to-test-performance-of-filebeat/57130 "2016-08-08T12:56:44Z")
Hi Everyone, I am new to the ELK Stack. I wanted to know if we could test the performance of filebeat. I am developing a system that would have a huge amount of logs generated within a short amount of time. Therefore, … --- ## [Wrong file path when file rotation](https://discuss.elastic.co/t/wrong-file-path-when-file-rotation/57298)
**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\ **Replies:** 6\ **Last updated:** [August 8, 2016, 12:36pm UTC](https://discuss.elastic.co/t/wrong-file-path-when-file-rotation/57298 "2016-08-08T12:36:37Z")
I was testing how fiebeat handles file roration case. I found two problems, and I'm not sure if that's caused by my configuration or the filebeat issues. ###Problem A: filebeat didn't read any update in the renamed file … --- ## [Mysql data not seen in packetbeats](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350)
**Author:** [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)\ **Replies:** 23\ **Last updated:** [August 8, 2016, 12:18pm UTC](https://discuss.elastic.co/t/mysql-data-not-seen-in-packetbeats/56350 "2016-08-08T12:18:24Z")
I do not see the mysql data in the packetbeats when I run the command packetbeat -e -d "publish" -N. Whereas I see the DNS and Redis data flowing in. I have used the 127.0.0.1 ip to access mysql instead of localhost. My… --- ## [Different "include\_lines" for different files](https://discuss.elastic.co/t/different-include-lines-for-different-files/57449)
**Author:** [@Dan2](https://discuss.elastic.co/u/Dan2)\ **Replies:** 1\ **Last updated:** [August 8, 2016, 9:04am UTC](https://discuss.elastic.co/t/different-include-lines-for-different-files/57449 "2016-08-08T09:04:07Z")
Hi, I'm using Filebeat and its working great, now I need to change it configuration a little bit and I'm not sure how. I want Filebeat to harvest different files, each file with a different "include\_lines" configuration… --- ## [MetricBeat dashboard: Servers Overview is limited to 5 servers](https://discuss.elastic.co/t/metricbeat-dashboard-servers-overview-is-limited-to-5-servers/57456)
**Author:** [@Dmitry\_Belyakov](https://discuss.elastic.co/u/Dmitry_Belyakov)\ **Replies:** 0\ **Last updated:** [August 8, 2016, 8:55am UTC](https://discuss.elastic.co/t/metricbeat-dashboard-servers-overview-is-limited-to-5-servers/57456 "2016-08-08T08:55:44Z")
Hi there! I wonder if anyone can help me with this one: it seems the "Servers Overview" visualisation only shows 5 servers at all times. It wasn't a problem until i added extra 2 servers which caused the other 2 to dis… --- ## [Filebeat-god does not forward SIGKILL to filebeat process](https://discuss.elastic.co/t/filebeat-god-does-not-forward-sigkill-to-filebeat-process/57368)
**Author:** [@davidGlarkin](https://discuss.elastic.co/u/davidGlarkin)\ **Replies:** 0\ **Last updated:** [August 5, 2016, 4:06pm UTC](https://discuss.elastic.co/t/filebeat-god-does-not-forward-sigkill-to-filebeat-process/57368 "2016-08-05T16:06:11Z")
Hello, I have been having an issue wherein I send a SIGKILL (kill -9) to the filebeat-god process, and the child process does not receive the forwarded signal, causing it to stay alive. I want to be able to automaticall… --- ## [Does filebeat can ship its own logs to elasticsearch](https://discuss.elastic.co/t/does-filebeat-can-ship-its-own-logs-to-elasticsearch/56495)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 7\ **Last updated:** [August 8, 2016, 8:35am UTC](https://discuss.elastic.co/t/does-filebeat-can-ship-its-own-logs-to-elasticsearch/56495 "2016-08-08T08:35:47Z")
Hi, I am shipping some log files using filebeat to elasticsearch through logstash. And in this chain there is possibility of any component going down. So inorder to monitor filebeat I want to ship filebeat.log also along… --- ## [Filebeat not considering all file matched via wildcard (\*)](https://discuss.elastic.co/t/filebeat-not-considering-all-file-matched-via-wildcard/56406)
**Author:** [@s8sg](https://discuss.elastic.co/u/s8sg)\ **Replies:** 5\ **Last updated:** [August 8, 2016, 8:34am UTC](https://discuss.elastic.co/t/filebeat-not-considering-all-file-matched-via-wildcard/56406 "2016-08-08T08:34:29Z")
I'm using filebeat from an custom docker container. Where /var/log is mounted as /data/system and /var/lib/nomad/alloc as /data/nomad I have the below files in the mounted directory: 1. /data/system $ docker exec… --- ## [Question about filebeat 5.0.0-alpha trial](https://discuss.elastic.co/t/question-about-filebeat-5-0-0-alpha-trial/57190)
**Author:** [@Elastic3150](https://discuss.elastic.co/u/Elastic3150)\ **Replies:** 1\ **Last updated:** [August 8, 2016, 8:17am UTC](https://discuss.elastic.co/t/question-about-filebeat-5-0-0-alpha-trial/57190 "2016-08-08T08:17:27Z")
I'm using filebeat version 5.0.0-alpha3 (amd64), libbeat 5.0.0-alpha3 for realtime log collection trial in following config: filebeat.prospectors: input\_type: log paths: /path/to/access.log.\* output.logstash: … --- ## [File beat configuration to ship CSV file to logstash](https://discuss.elastic.co/t/file-beat-configuration-to-ship-csv-file-to-logstash/57172)
**Author:** [@theiamdude](https://discuss.elastic.co/u/theiamdude)\ **Replies:** 1\ **Last updated:** [August 8, 2016, 8:09am UTC](https://discuss.elastic.co/t/file-beat-configuration-to-ship-csv-file-to-logstash/57172 "2016-08-08T08:09:49Z")
Hi all, I am trying to ship CSV file to my logstash instance and every time I start the process it get's stuck at 2016/08/04 04:38:18.693034 log.go:113: INFO Harvester started for file: ../logs/ldap-access.csv It works… --- ## [Logs are not being pushed from beats to logstash](https://discuss.elastic.co/t/logs-are-not-being-pushed-from-beats-to-logstash/57335)
**Author:** [@rocky4bmw](https://discuss.elastic.co/u/rocky4bmw)\ **Replies:** 5\ **Last updated:** [August 8, 2016, 4:35am UTC](https://discuss.elastic.co/t/logs-are-not-being-pushed-from-beats-to-logstash/57335 "2016-08-08T04:35:37Z")
Can anyone help me in fixing this issue -\> I configured Logstash 2.3.4 , Kibana 4.5.3 and ES 2.3.4 along with search guard bundle 2.3.4 on single master server. -\> I configured beats as per standard document on clien… --- ## [Filebeat (5.0.0Alpha4) and filter](https://discuss.elastic.co/t/filebeat-5-0-0alpha4-and-filter/57287)
**Author:** [@logstash\_user](https://discuss.elastic.co/u/logstash_user)\ **Replies:** 5\ **Last updated:** [August 7, 2016, 3:32am UTC](https://discuss.elastic.co/t/filebeat-5-0-0alpha4-and-filter/57287 "2016-08-07T03:32:36Z")
Our present setup is: FileBeat (5.0.0 Alpha4) -\> Kafka -\> Logstash -\> Elasticsearch We were looking into the option of filtering (dropping) un-needed event logs at the source that is using FileBeat. Our typical Log … --- ## [Filebeat 5.0alpha3/4 doesn't clean registry and crashes](https://discuss.elastic.co/t/filebeat-5-0alpha3-4-doesnt-clean-registry-and-crashes/56971)
**Author:** [@Gabry993](https://discuss.elastic.co/u/Gabry993)\ **Replies:** 3\ **Last updated:** [August 6, 2016, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-5-0alpha3-4-doesnt-clean-registry-and-crashes/56971 "2016-08-06T21:10:16Z")
Hi, I'm facing a couple of problem when running filebeat (both alpha 3 and 4) on a windows server 2003. I'm trying to send the content of a log file which is written continuously and it's rotated often. This is how th… --- ## [Filebeat events in syslogs](https://discuss.elastic.co/t/filebeat-events-in-syslogs/57304)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [August 5, 2016, 12:04pm UTC](https://discuss.elastic.co/t/filebeat-events-in-syslogs/57304 "2016-08-05T12:04:49Z")
Hi, We have one server in production where filebeat is running. I just saw there are following messages in /var/log/messages Where is the configuration which tells such failure messages to go in syslog? Aug 1 10:58… --- ## [Filebeat-god description?](https://discuss.elastic.co/t/filebeat-god-description/57281)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [August 4, 2016, 10:54pm UTC](https://discuss.elastic.co/t/filebeat-god-description/57281 "2016-08-04T22:54:34Z")
Hi, Can anyone point me at a description of what filebeat-god does and a link to its github repo ? Thanks, --- ## [Logstash not receiving logs from Winlogbeat 5.0 alpha](https://discuss.elastic.co/t/logstash-not-receiving-logs-from-winlogbeat-5-0-alpha/57277)
**Author:** [@alvaroca1](https://discuss.elastic.co/u/alvaroca1)\ **Replies:** 15\ **Last updated:** [August 4, 2016, 9:47pm UTC](https://discuss.elastic.co/t/logstash-not-receiving-logs-from-winlogbeat-5-0-alpha/57277 "2016-08-04T21:47:20Z")
upgraded winlogbeat to v 5.a and not I'm not able to receive any data to logstash see below error on log stash D:\\Elastic\\logstash\\bin\>logstash -f logstash.conf io/console not supported; tty will not be manipulated Set… --- ## [Topbeat server configuration question](https://discuss.elastic.co/t/topbeat-server-configuration-question/57271)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 4\ **Last updated:** [August 4, 2016, 7:46pm UTC](https://discuss.elastic.co/t/topbeat-server-configuration-question/57271 "2016-08-04T19:46:14Z")
Hello, all. I've just installed Topbeat on a node and, of course, want to capture data and view it in Kibana. I do have it working (topbeat.yml configured to use logstash as output), but all the Topbeat data end up in… --- ## [Topbeat on freebsd](https://discuss.elastic.co/t/topbeat-on-freebsd/45182)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 5\ **Last updated:** [August 4, 2016, 7:11pm UTC](https://discuss.elastic.co/t/topbeat-on-freebsd/45182 "2016-08-04T19:11:27Z")
I am trying to monitory my freebsd server, Is there any freebsd compatible version for topbeat ?, I could get freebsd compatible binary for filebeat here https://beats-nightlies.s3.amazonaws.com/jenkins/topbeat/313-d5c7f… --- ## [Winlogbeat 5.0 mapper\_parsing\_exception from Elasticsearch](https://discuss.elastic.co/t/winlogbeat-5-0-mapper-parsing-exception-from-elasticsearch/57223)
**Author:** [@rhyse](https://discuss.elastic.co/u/rhyse)\ **Replies:** 7\ **Last updated:** [August 4, 2016, 3:54pm UTC](https://discuss.elastic.co/t/winlogbeat-5-0-mapper-parsing-exception-from-elasticsearch/57223 "2016-08-04T15:54:46Z")
Hi I am using Winlogbeat 5.0.0-alpha4 and am having trouble reading in the following event log Log Name: Application Source: Group Policy Local Users and Groups Date: 04/08/2016 14:08:22 Event ID… --- ## [Multline in filebeat](https://discuss.elastic.co/t/multline-in-filebeat/57208)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 1\ **Last updated:** [August 4, 2016, 3:22pm UTC](https://discuss.elastic.co/t/multline-in-filebeat/57208 "2016-08-04T15:22:49Z")
HI, I'm just trying to split events from my log by using of multline concept. I have given my pattern to split the events but is failed to split and capturing entire data into single event in elasticsearch. Please find m… --- ## [Kubernetes and elk](https://discuss.elastic.co/t/kubernetes-and-elk/55569)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 8\ **Last updated:** [August 4, 2016, 9:10am UTC](https://discuss.elastic.co/t/kubernetes-and-elk/55569 "2016-08-04T09:10:25Z")
Hey, I am trying to ship logs from kubernates containers. Any idea how to connect kubernates with filebeat? How to find the kubernetes container logs? --- ## [New files detected but data not sent. offset remains at 0](https://discuss.elastic.co/t/new-files-detected-but-data-not-sent-offset-remains-at-0/56460)
**Author:** [@seventy-7](https://discuss.elastic.co/u/seventy-7)\ **Replies:** 6\ **Last updated:** [August 3, 2016, 11:35pm UTC](https://discuss.elastic.co/t/new-files-detected-but-data-not-sent-offset-remains-at-0/56460 "2016-08-03T23:35:25Z")
Hello Beats community. I have recently migrated from logstash-forwarder to filebeat-1.2.3-1.x86\_64. Running on CentOS 7. I have new application files generated each day which have the date in the filename. There is als… --- ## [Metricbeat logs contain errors about nonexistent Redis properties](https://discuss.elastic.co/t/metricbeat-logs-contain-errors-about-nonexistent-redis-properties/56923)
**Author:** [@ladenedge](https://discuss.elastic.co/u/ladenedge)\ **Replies:** 3\ **Last updated:** [August 3, 2016, 10:48am UTC](https://discuss.elastic.co/t/metricbeat-logs-contain-errors-about-nonexistent-redis-properties/56923 "2016-08-03T10:48:37Z")
Metricbeat-5.0.0-alpha4 Redis v3.0.501 (Windows) My log contains the following errors, repeated on every period: 2016-08-01T14:56:42-04:00 ERR Key does not exist in in data: gcc\_version 2016-08-01T14:56:42-04:00 ERR … --- ## [How to use SSL between Filebeat 5 and Kafka 0.10?](https://discuss.elastic.co/t/how-to-use-ssl-between-filebeat-5-and-kafka-0-10/57023)
**Author:** [@Tsury](https://discuss.elastic.co/u/Tsury)\ **Replies:** 1\ **Last updated:** [August 3, 2016, 9:29am UTC](https://discuss.elastic.co/t/how-to-use-ssl-between-filebeat-5-and-kafka-0-10/57023 "2016-08-03T09:29:22Z")
Hi. I am new to Filebeat and Kafka and managed to set them together just fine. I now want to add SSL and don't know where to begin. I can set Kafka to work with SSL as explained in the official Apache documentation, … [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=566) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=568)