# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=569 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 570 --- ## [Is it possible to monitor https traffic through packetbeat?](https://discuss.elastic.co/t/is-it-possible-to-monitor-https-traffic-through-packetbeat/56511)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 0\ **Last updated:** [July 27, 2016, 12:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-monitor-https-traffic-through-packetbeat/56511 "2016-07-27T12:00:15Z")
Hi, Can we monitor https traffic using packetbeat, using some SSL proxy , trusted man in middle approach or through any other technique.? If so can someone explain Thanks Harsha --- ## [Filebeat hanging with a redis output](https://discuss.elastic.co/t/filebeat-hanging-with-a-redis-output/56412)
**Author:** [@harrytewkesbury](https://discuss.elastic.co/u/harrytewkesbury)\ **Replies:** 1\ **Last updated:** [July 26, 2016, 9:52pm UTC](https://discuss.elastic.co/t/filebeat-hanging-with-a-redis-output/56412 "2016-07-26T21:52:45Z")
EDIT: Please Ignore - PEBCAK error. Apologies. Redis endpoint wasn't correct. Sigh. Not that logging helped with that mind... no logs were written to say it wasn't accessible, even with the timeout in place as seen in th… --- ## [Getting kernel messages directly ala dmesg (no filesystem)?](https://discuss.elastic.co/t/getting-kernel-messages-directly-ala-dmesg-no-filesystem/56448)
**Author:** [@eldondev](https://discuss.elastic.co/u/eldondev)\ **Replies:** 1\ **Last updated:** [July 26, 2016, 9:45pm UTC](https://discuss.elastic.co/t/getting-kernel-messages-directly-ala-dmesg-no-filesystem/56448 "2016-07-26T21:45:58Z")
Is there a way to use beats to get kernel messages directly from the kernel? I am experiencing some filesystem errors, and I am not sure how to get that info back with a file or metric beat if nothing can write the error… --- ## [Filebeat locks application logs on Windows](https://discuss.elastic.co/t/filebeat-locks-application-logs-on-windows/56307)
**Author:** [@cisconetgineer](https://discuss.elastic.co/u/cisconetgineer)\ **Replies:** 7\ **Last updated:** [July 26, 2016, 6:38pm UTC](https://discuss.elastic.co/t/filebeat-locks-application-logs-on-windows/56307 "2016-07-26T18:38:06Z")
Hi, I am testing filebeat and it locks application files on Windows 2008. I tried version 1.23, 5.0.0 alpha4 and 5.0.0 apha5. All of them exhibits the same issue. Here are stepsI tested. 1. start filebeat, start appl… --- ## [Need a solution](https://discuss.elastic.co/t/need-a-solution/56355)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [July 26, 2016, 7:51am UTC](https://discuss.elastic.co/t/need-a-solution/56355 "2016-07-26T07:51:50Z")
Hi, Can anybody suggest a solution for below use case? Checking status of service and send it to load balancer. Load balancer asks for status code of service--\> An Application 'A' (??) calls service and returns stat… --- ## [Filebeat can't talk to logstash with connection refused error](https://discuss.elastic.co/t/filebeat-cant-talk-to-logstash-with-connection-refused-error/56353)
**Author:** [@caoping](https://discuss.elastic.co/u/caoping)\ **Replies:** 4\ **Last updated:** [July 26, 2016, 6:46am UTC](https://discuss.elastic.co/t/filebeat-cant-talk-to-logstash-with-connection-refused-error/56353 "2016-07-26T06:46:00Z")
I installed & configured filebeat in host A, logstash in host B. I hope filebeat sending log data to logstash in host B. However, after starting filebeat and logstash, error at filebeat side occurred. Below is the error … --- ## [Filebeat metric](https://discuss.elastic.co/t/filebeat-metric/55661)
**Author:** [@yanjun](https://discuss.elastic.co/u/yanjun)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 6:33am UTC](https://discuss.elastic.co/t/filebeat-metric/55661 "2016-07-26T06:33:49Z")
Hi, Does filebeat outputs any metrics. We 'd like to track its throughput and something like the lag offsets to the end of the files etc. --- ## [Filebeat start endless reconnectiosn when connect error happen to kafka cluster](https://discuss.elastic.co/t/filebeat-start-endless-reconnectiosn-when-connect-error-happen-to-kafka-cluster/56241)
**Author:** [@DeeeFOX](https://discuss.elastic.co/u/DeeeFOX)\ **Replies:** 2\ **Last updated:** [July 26, 2016, 3:39am UTC](https://discuss.elastic.co/t/filebeat-start-endless-reconnectiosn-when-connect-error-happen-to-kafka-cluster/56241 "2016-07-26T03:39:45Z")
Version: latest stable Operating System: Debian 8 Steps to Reproduce: Description There is 4 filebeat nodes, a 2 node kafka cluster, and data is being send from beat to kafka correctly in this structure. fb fb… --- ## [Will filebeat handle properly the underlying log file rotation?](https://discuss.elastic.co/t/will-filebeat-handle-properly-the-underlying-log-file-rotation/56119)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 11\ **Last updated:** [July 25, 2016, 4:48pm UTC](https://discuss.elastic.co/t/will-filebeat-handle-properly-the-underlying-log-file-rotation/56119 "2016-07-25T16:48:14Z")
If filebeat monitors mysqld.log file (MySQL log file) and that file gets rotated out - renamed into mysql.log.1, and new mysqld.log is created - will filebeat continue to read new mysql.d, assuming filebeat.yml has liste… --- ## [How to read evtx file from remote server using Winlogbeat](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305)
**Author:** [@yesoreyeram](https://discuss.elastic.co/u/yesoreyeram)\ **Replies:** 1\ **Last updated:** [July 25, 2016, 3:18pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305 "2016-07-25T15:18:15Z")
How to read evtx file from remote server using winlogbeat? I have access to evtx path in the server. But i dont have access to execute winlogbeat agents in the remote server. --- ## [Filebeat: send fail; Error publishing events (retrying): read tcp 10.13.37.73:49990-\>10.13.37.99:5044: i/o timeout](https://discuss.elastic.co/t/filebeat-send-fail-error-publishing-events-retrying-read-tcp-10-13-37-73-49990-10-13-37-99-5044-i-o-timeout/55769)
**Author:** [@Ruoyu\_Chen](https://discuss.elastic.co/u/Ruoyu_Chen)\ **Replies:** 5\ **Last updated:** [July 25, 2016, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-send-fail-error-publishing-events-retrying-read-tcp-10-13-37-73-49990-10-13-37-99-5044-i-o-timeout/55769 "2016-07-25T13:14:12Z")
Hello! I am new to ELKStack. Somebody else have installed Logstash, Elasticsearch on the logstash server and filebeat on another server. But there is a problem remain and I responsible of solving it. The problem seems … --- ## [Monitor Mbp/s and MBp/s](https://discuss.elastic.co/t/monitor-mbp-s-and-mbp-s/56288)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 4\ **Last updated:** [July 25, 2016, 1:09pm UTC](https://discuss.elastic.co/t/monitor-mbp-s-and-mbp-s/56288 "2016-07-25T13:09:01Z")
Hi, I tried the search function but couldn't find anything. Perhaps I overlooked some configuration, but is it possible with Packetbeat to monitor the MegaByte per second and Mbit per second of a network interface? … --- ## [Logstash is not outputing the data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-outputing-the-data-to-elasticsearch/55574)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 7\ **Last updated:** [July 25, 2016, 12:35pm UTC](https://discuss.elastic.co/t/logstash-is-not-outputing-the-data-to-elasticsearch/55574 "2016-07-25T12:35:39Z")
io/console not supported; tty will not be manipulated Settings: Default pipeline workers: 4 ←\[31mConnection refused: connect {:class=\>"Manticore::SocketException", :level=\>:error}←\[0m Pipeline main started ===========\>\>… --- ## [Pull instead of push](https://discuss.elastic.co/t/pull-instead-of-push/56033)
**Author:** [@Dalton\_Culp](https://discuss.elastic.co/u/Dalton_Culp)\ **Replies:** 3\ **Last updated:** [July 25, 2016, 12:17pm UTC](https://discuss.elastic.co/t/pull-instead-of-push/56033 "2016-07-25T12:17:23Z")
Is there a specific beat or a way anyone knows where i can have my ELK server pull data from a syslog server? Instead of having to install a beat on my syslog server and pushing the data to my ELK server. I do not know i… --- ## [Clean\_removed option not work with filebeat 5.0.0-alpha4](https://discuss.elastic.co/t/clean-removed-option-not-work-with-filebeat-5-0-0-alpha4/56237)
**Author:** [@xiongzhichaoelk](https://discuss.elastic.co/u/xiongzhichaoelk)\ **Replies:** 1\ **Last updated:** [July 25, 2016, 7:32am UTC](https://discuss.elastic.co/t/clean-removed-option-not-work-with-filebeat-5-0-0-alpha4/56237 "2016-07-25T07:32:54Z")
Clean\_removed can not find in the filebeat.full.yml that mean the version with this option has not publish ? then when it will be published ? --- ## [Filebeat ssl client failed to connect sometimes](https://discuss.elastic.co/t/filebeat-ssl-client-failed-to-connect-sometimes/56212)
**Author:** [@dfaropennetwork](https://discuss.elastic.co/u/dfaropennetwork)\ **Replies:** 1\ **Last updated:** [July 25, 2016, 7:32am UTC](https://discuss.elastic.co/t/filebeat-ssl-client-failed-to-connect-sometimes/56212 "2016-07-25T07:32:05Z")
Hi all, I 've the filebeat 1.2.3 version and topbeat/packetbeat. I see on the syslog the folowing error: Jul 23 04:45:14 hostname /usr/bin/filebeat\[858\]: transport.go:125: SSL client failed to connect with: read tc… --- ## [How to export beat name instead of hostname for beat.name field](https://discuss.elastic.co/t/how-to-export-beat-name-instead-of-hostname-for-beat-name-field/56026)
**Author:** [@bklise](https://discuss.elastic.co/u/bklise)\ **Replies:** 5\ **Last updated:** [July 24, 2016, 9:01pm UTC](https://discuss.elastic.co/t/how-to-export-beat-name-instead-of-hostname-for-beat-name-field/56026 "2016-07-24T21:01:33Z")
I apologize if this is a duplicate, but I was unable to find a solution. For the beat.name field of my beat's output, it is using my hostname instead of the beat name: "beat":{ "hostname":"bklise", "name":… --- ## [Monitor Size of Single Directory?](https://discuss.elastic.co/t/monitor-size-of-single-directory/56038)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 7\ **Last updated:** [July 22, 2016, 10:09pm UTC](https://discuss.elastic.co/t/monitor-size-of-single-directory/56038 "2016-07-22T22:09:51Z")
Is there any way to configure Topbeat to monitor the size of one directory? I am considering just writing a script that does: 'du -h \> dirsize.txt' and tailing that file, but I'd prefer something more elegant.. --- ## [Scaling beats(filebeat at this moment) ~5k servers](https://discuss.elastic.co/t/scaling-beats-filebeat-at-this-moment-5k-servers/56006)
**Author:** [@lightkz](https://discuss.elastic.co/u/lightkz)\ **Replies:** 4\ **Last updated:** [July 22, 2016, 7:19pm UTC](https://discuss.elastic.co/t/scaling-beats-filebeat-at-this-moment-5k-servers/56006 "2016-07-22T19:19:56Z")
Hi Beats folks, We just recently started playing with filebeats and see a lot of usefulness. But we got a bit stuck with scaling, configs management, and some limitation(by design https://github.com/elastic/beats/is… --- ## [Filebeat behavior](https://discuss.elastic.co/t/filebeat-behavior/55141)
**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\ **Replies:** 6\ **Last updated:** [July 22, 2016, 4:36pm UTC](https://discuss.elastic.co/t/filebeat-behavior/55141 "2016-07-22T16:36:18Z")
I have an XML file which is gonna be updated arbitrary by another program by appending new documents each time... This file also will be initialized every day by depopulating it. I configured filebeat to catch every X… --- ## [Logstash not getting data from fliebeat . Logstash logs are empty](https://discuss.elastic.co/t/logstash-not-getting-data-from-fliebeat-logstash-logs-are-empty/56053)
**Author:** [@ramkrishnayadav](https://discuss.elastic.co/u/ramkrishnayadav)\ **Replies:** 2\ **Last updated:** [July 22, 2016, 3:18am UTC](https://discuss.elastic.co/t/logstash-not-getting-data-from-fliebeat-logstash-logs-are-empty/56053 "2016-07-22T03:18:29Z")
Hello, I am trying to send some logs from filebeat to logstash output. problem is beats is sending the events to the logstash server (I can see in the debug logs ). But log stash does not see anything coming . Even th… --- ## [Unable to connect to ELK server through a Client server with Filebeat configured](https://discuss.elastic.co/t/unable-to-connect-to-elk-server-through-a-client-server-with-filebeat-configured/55955)
**Author:** [@Kalpak\_Kawadkar](https://discuss.elastic.co/u/Kalpak_Kawadkar)\ **Replies:** 3\ **Last updated:** [July 21, 2016, 11:09pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elk-server-through-a-client-server-with-filebeat-configured/55955 "2016-07-21T23:09:39Z")
I followed the site \[ https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-16-04 \] but I am unable to test filebeat installtion --\> output shows 0 tota… --- ## [Load balancing with a single Logstash output](https://discuss.elastic.co/t/load-balancing-with-a-single-logstash-output/55756)
**Author:** [@joshuaspence](https://discuss.elastic.co/u/joshuaspence)\ **Replies:** 5\ **Last updated:** [July 21, 2016, 2:51pm UTC](https://discuss.elastic.co/t/load-balancing-with-a-single-logstash-output/55756 "2016-07-21T14:51:59Z")
I am trying to use Filebeat and have the output (Logstash) hosts queried via Consul's DNS interface. My Filebeat configuration looks like this: --- filebeat: spool\_size: 2048 idle\_timeout: '10s' registry\_file: '.… --- ## [Simple test showing that logstash port is reachable by filebeat](https://discuss.elastic.co/t/simple-test-showing-that-logstash-port-is-reachable-by-filebeat/55999)
**Author:** [@zoplex](https://discuss.elastic.co/u/zoplex)\ **Replies:** 4\ **Last updated:** [July 20, 2016, 9:01pm UTC](https://discuss.elastic.co/t/simple-test-showing-that-logstash-port-is-reachable-by-filebeat/55999 "2016-07-20T21:01:45Z")
We are looking at larger number of filebeats installations in the production environments. One challenge is that in some cases logstash host:5044 is not reachable from the filebeat host. How do we check using curl (nc … --- ## [Filebeat stops harvesting - file didn't change](https://discuss.elastic.co/t/filebeat-stops-harvesting-file-didnt-change/49446)
**Author:** [@knightsg](https://discuss.elastic.co/u/knightsg)\ **Replies:** 5\ **Last updated:** [July 20, 2016, 5:50pm UTC](https://discuss.elastic.co/t/filebeat-stops-harvesting-file-didnt-change/49446 "2016-07-20T17:50:00Z")
Today I found out about, and tried out filebeat for sending logs to Elasticsearch via Logstash, which I already had set up. It seemed to work fine for a bit, until I noticed that FB stops sending logs after a period of a… --- ## [How to test my beat output](https://discuss.elastic.co/t/how-to-test-my-beat-output/55449)
**Author:** [@bklise](https://discuss.elastic.co/u/bklise)\ **Replies:** 8\ **Last updated:** [July 20, 2016, 5:14pm UTC](https://discuss.elastic.co/t/how-to-test-my-beat-output/55449 "2016-07-20T17:14:18Z")
I notice that the example beats use python to test the output of the beat. I copied the packetbeat example for one test and tried to get mine to run, and I keep getting errors. I aslo do not understand in the README.m… --- ## [I dont see any filebeat index created on the elastic search](https://discuss.elastic.co/t/i-dont-see-any-filebeat-index-created-on-the-elastic-search/55585)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 1\ **Last updated:** [July 20, 2016, 3:16pm UTC](https://discuss.elastic.co/t/i-dont-see-any-filebeat-index-created-on-the-elastic-search/55585 "2016-07-20T15:16:33Z")
I have changed the output to elasticsearch in filebeat.yml. I dont see any index on elasticsearch and kibana. i have started filebeat by using the command ./filebeat -e -c filebeat.yml -d "publish". I can see it publishi… --- ## [Let's Encrypt and Filebeat TLS](https://discuss.elastic.co/t/lets-encrypt-and-filebeat-tls/55882)
**Author:** [@Zorlin](https://discuss.elastic.co/u/Zorlin)\ **Replies:** 7\ **Last updated:** [July 20, 2016, 2:57pm UTC](https://discuss.elastic.co/t/lets-encrypt-and-filebeat-tls/55882 "2016-07-20T14:57:35Z")
Hey there, I've been following this guide to get an ELK stack up and running - https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elk-stack-on-ubuntu-14-04 However, I do… --- ## [Filebeat still scanning files, but not finding new log entries](https://discuss.elastic.co/t/filebeat-still-scanning-files-but-not-finding-new-log-entries/55424)
**Author:** [@Todd\_Ruch](https://discuss.elastic.co/u/Todd_Ruch)\ **Replies:** 11\ **Last updated:** [July 20, 2016, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-still-scanning-files-but-not-finding-new-log-entries/55424 "2016-07-20T12:56:33Z")
Hello! I'm using filebeat-1.2.3-1.x86\_64 on a CentOS 6.5 host. The problem I'm having is that after I start filebeat through the init process, it runs for a short period (what seems like the initial batch) and then ant… --- ## [Accessing environment variables in filebeat](https://discuss.elastic.co/t/accessing-environment-variables-in-filebeat/55714)
**Author:** [@snandam](https://discuss.elastic.co/u/snandam)\ **Replies:** 4\ **Last updated:** [July 20, 2016, 1:54pm UTC](https://discuss.elastic.co/t/accessing-environment-variables-in-filebeat/55714 "2016-07-20T13:54:31Z")
I'm trying to access an environment variable in filebeat.yml to use as value for a field that I would like to include in the output but don;t seem to work as expected. filebeat: prospectors: - paths: … [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=568) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=570)