# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=575 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 576 --- ## [Topbeat not sending accurate proc.user\_p data](https://discuss.elastic.co/t/topbeat-not-sending-accurate-proc-user-p-data/53169)
**Author:** [@shubham\_deodia](https://discuss.elastic.co/u/shubham_deodia)\ **Replies:** 1\ **Last updated:** [June 20, 2016, 7:38am UTC](https://discuss.elastic.co/t/topbeat-not-sending-accurate-proc-user-p-data/53169 "2016-06-20T07:38:29Z")
Hi, I have been working with topbeat for last few weeks, but suddenly CPU Disk usage per process begin to show no data. When i checked, i found out topbeat is not sending accurate data for all top process. "proc": { … --- ## [Use of beats, logstash, kibana somewhat of distaster](https://discuss.elastic.co/t/use-of-beats-logstash-kibana-somewhat-of-distaster/53243)
**Author:** [@David\_Montgomery](https://discuss.elastic.co/u/David_Montgomery)\ **Replies:** 1\ **Last updated:** [June 19, 2016, 9:16pm UTC](https://discuss.elastic.co/t/use-of-beats-logstash-kibana-somewhat-of-distaster/53243 "2016-06-19T21:16:45Z")
Helloi Elasticsearch The beats and logstash documentation is by no stretch of the imagination clear. 1) From by app server I can write json logs to logstash and then I can see the records in kibana. Great, but w… --- ## [Compile error - gotestcover " matched no packages"](https://discuss.elastic.co/t/compile-error-gotestcover-matched-no-packages/53190)
**Author:** [@syst0m](https://discuss.elastic.co/u/syst0m)\ **Replies:** 1\ **Last updated:** [June 17, 2016, 8:43pm UTC](https://discuss.elastic.co/t/compile-error-gotestcover-matched-no-packages/53190 "2016-06-17T20:43:40Z")
beats\]# make make -C libbeat testsuite || exit 1; make -C packetbeat testsuite || exit 1; make -C topbeat testsuite || exit 1; make -C filebeat testsuite || exit 1; make -C winlogbeat testsuite || exit 1; make -C metricb… --- ## [Filebeat not sending logs to Elasticsearch](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-elasticsearch/52925)
**Author:** [@keya](https://discuss.elastic.co/u/keya)\ **Replies:** 4\ **Last updated:** [June 17, 2016, 3:19pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-elasticsearch/52925 "2016-06-17T15:19:17Z")
Hi, I am new to Filebeat and cannot get the logs to reach Elasticsearch. I have Filebeat and Elasticsearch on the same Ubuntu instance. Below is a snapshot from the filebeat logs: 2016-06-15T14:38:00-07:00 DBG Disab… --- ## [How to implement TCP/UDP protocol in Packetbeats](https://discuss.elastic.co/t/how-to-implement-tcp-udp-protocol-in-packetbeats/52982)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 8\ **Last updated:** [June 17, 2016, 2:52pm UTC](https://discuss.elastic.co/t/how-to-implement-tcp-udp-protocol-in-packetbeats/52982 "2016-06-17T14:52:09Z")
Hi, I am very new to this packet beats. I tried to add TCP/UDP protocols to my packet beats as directed in the "learn docs" I downloaded "go" & "beats-master" from GitHub. But the lines mentioned in the docs cant find an… --- ## [Issue with double quotes being escaped](https://discuss.elastic.co/t/issue-with-double-quotes-being-escaped/53064)
**Author:** [@elliottcf](https://discuss.elastic.co/u/elliottcf)\ **Replies:** 5\ **Last updated:** [June 17, 2016, 2:46pm UTC](https://discuss.elastic.co/t/issue-with-double-quotes-being-escaped/53064 "2016-06-17T14:46:50Z")
I'm having an issue with my Filebeat 1.2.3. install. I am trying to read Nginx logs and output them to Redis. I had this system working (at least in a testing capacity) for a week and recently I noticed that I am getti… --- ## [Response time issue on packetbeat](https://discuss.elastic.co/t/response-time-issue-on-packetbeat/53025)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 5\ **Last updated:** [June 17, 2016, 2:44pm UTC](https://discuss.elastic.co/t/response-time-issue-on-packetbeat/53025 "2016-06-17T14:44:36Z")
Does response time equals to latency or there is calculation for latency? Because when I use the sample dashboard for topbeat, I saw that there is a latency diagram showing response time as X-axis in Kibana and does it c… --- ## [Filebeat service running in windows but not shipping logs](https://discuss.elastic.co/t/filebeat-service-running-in-windows-but-not-shipping-logs/51819)
**Author:** [@marco.mojica](https://discuss.elastic.co/u/marco.mojica)\ **Replies:** 5\ **Last updated:** [June 17, 2016, 1:36pm UTC](https://discuss.elastic.co/t/filebeat-service-running-in-windows-but-not-shipping-logs/51819 "2016-06-17T13:36:40Z")
I have been expiriencing the following problem. System Specs Windows Server 2012 Standard filebeat; Version: 1.2.2 I am running this package of ELK everything is running as localhost. so the problem is that the serv… --- ## [Packetbeat:How to add a new protocol?](https://discuss.elastic.co/t/packetbeat-how-to-add-a-new-protocol/48372)
**Author:** [@lindsayshow](https://discuss.elastic.co/u/lindsayshow)\ **Replies:** 16\ **Last updated:** [June 17, 2016, 1:16pm UTC](https://discuss.elastic.co/t/packetbeat-how-to-add-a-new-protocol/48372 "2016-06-17T13:16:28Z")
I know the https://www.elastic.co/guide/en/beats/packetbeat/current/new-protocol.html guide,but the guide is too old for the latest packetbeat version or source code.I find it's too hard to learn how to add a new protoc… --- ## [Filebeat fails to pickup other files](https://discuss.elastic.co/t/filebeat-fails-to-pickup-other-files/51202)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 23\ **Last updated:** [June 17, 2016, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-fails-to-pickup-other-files/51202 "2016-06-17T13:14:55Z")
Hello I run into this type of issue: 2016-05-27T20:05:19Z INFO Old file with new name found: /flow\_base\_dir/dump/flows-201605270835.dump is no /flow\_base\_dir/dump/flows-201605272000.dump 2016-05-27T20:05:19Z INFO Detec… --- ## [OfficeScan/security agent blocking packetbeat](https://discuss.elastic.co/t/officescan-security-agent-blocking-packetbeat/52989)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 2\ **Last updated:** [June 17, 2016, 4:43am UTC](https://discuss.elastic.co/t/officescan-security-agent-blocking-packetbeat/52989 "2016-06-17T04:43:16Z")
Dear Team, In one of our customer environment Topbeat is working perfect but packetbeat is behaving abruptly. On further investigation we saw urls referring officescan and mention of dll... Has any one faced similar … --- ## [Topbeat on Windows](https://discuss.elastic.co/t/topbeat-on-windows/52942)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 16, 2016, 6:48pm UTC](https://discuss.elastic.co/t/topbeat-on-windows/52942 "2016-06-16T18:48:03Z")
I have been using topbeat to collect metrics on my server, however, I have found that the metrics load.load1 seem not to be available for Windows machine. Is that right? If true, how can I collect the system load on Wind… --- ## [Filebeat not polling the directory](https://discuss.elastic.co/t/filebeat-not-polling-the-directory/51472)
**Author:** [@kalapakim](https://discuss.elastic.co/u/kalapakim)\ **Replies:** 10\ **Last updated:** [June 16, 2016, 10:28am UTC](https://discuss.elastic.co/t/filebeat-not-polling-the-directory/51472 "2016-06-16T10:28:27Z")
if I run the command: filebeat.exe -c filebeat.yml -e then any logs that are dropped into the directory I specify will be harvested and sent to kafka, as expected. But I do not want a command window up and running.… --- ## [Trying to setup winlogbeat to ship windows events to working ELK stack](https://discuss.elastic.co/t/trying-to-setup-winlogbeat-to-ship-windows-events-to-working-elk-stack/52624)
**Author:** [@iqbal\_nazir](https://discuss.elastic.co/u/iqbal_nazir)\ **Replies:** 19\ **Last updated:** [June 16, 2016, 10:13am UTC](https://discuss.elastic.co/t/trying-to-setup-winlogbeat-to-ship-windows-events-to-working-elk-stack/52624 "2016-06-16T10:13:30Z")
Hello, I have a working ELK server on Ubuntu 16.04. I have another ubuntu 14.04 which is sending logs to my ELK successfully. Now, I want to add a windows client to my ELK which will send its events to ELK. To do so, I'm… --- ## [Packetbeat Bytes in and out data issues](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 16, 2016, 10:10am UTC](https://discuss.elastic.co/t/packetbeat-bytes-in-and-out-data-issues/52945 "2016-06-16T10:10:54Z")
I have read the documentation from packetbeat and realized that the packetbeat measure Bytes in and Bytes out data across application layer message. I would like to know does it measure all the layer or just a specific l… --- ## [Did anyone test performance of packetbeat?](https://discuss.elastic.co/t/did-anyone-test-performance-of-packetbeat/51959)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 10\ **Last updated:** [June 16, 2016, 9:34am UTC](https://discuss.elastic.co/t/did-anyone-test-performance-of-packetbeat/51959 "2016-06-16T09:34:05Z")
Hi, I am curious to know the performance of packetbeat. If anyone tested with more requests, could you please post metrics and capabilities of packetbeat like how many requests you tried, what is cpu, network utilisati… --- ## [Filebeat escaping backslashes on its own](https://discuss.elastic.co/t/filebeat-escaping-backslashes-on-its-own/52899)
**Author:** [@fiunchinho](https://discuss.elastic.co/u/fiunchinho)\ **Replies:** 8\ **Last updated:** [June 16, 2016, 9:18am UTC](https://discuss.elastic.co/t/filebeat-escaping-backslashes-on-its-own/52899 "2016-06-16T09:18:46Z")
I have a file with the following entry logs. Some Java stack traces with \\n instead of break lines, so it's only one line per log entry 2016-05-30 11:25:53,907 WARN 4209 \[DiscoveryClient-InstanceInfoReplicator-0\] com.… --- ## [Topbeat & Packetbeat VS Dynatrace/Splunk](https://discuss.elastic.co/t/topbeat-packetbeat-vs-dynatrace-splunk/52836)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 9:14am UTC](https://discuss.elastic.co/t/topbeat-packetbeat-vs-dynatrace-splunk/52836 "2016-06-16T09:14:35Z")
Dear Team, Has any one done any comparative study of Topbeat/Packetveat vs Dynatrace/Splunk agents ?? In terms of CPU, Memory, Storage & Network load etc.. Regards, --- ## [Filebeat: allow prospectors includes from different files](https://discuss.elastic.co/t/filebeat-allow-prospectors-includes-from-different-files/52833)
**Author:** [@dmajere](https://discuss.elastic.co/u/dmajere)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 8:28am UTC](https://discuss.elastic.co/t/filebeat-allow-prospectors-includes-from-different-files/52833 "2016-06-16T08:28:34Z")
Filebeat version: 1.2.3 (amd64) The situation is: I've got a node on which I start containers with applications on demand. Containers can appear and disappear frequently, and so the log files i need to ship. What I was t… --- ## [Packetbeat: Disable request parameters from http request to Elasticsearch](https://discuss.elastic.co/t/packetbeat-disable-request-parameters-from-http-request-to-elasticsearch/52295)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 7\ **Last updated:** [June 16, 2016, 3:02am UTC](https://discuss.elastic.co/t/packetbeat-disable-request-parameters-from-http-request-to-elasticsearch/52295 "2016-06-16T03:02:59Z")
Dear Team, May I request some to guide on how to configure packetbeat to avoid packetbeat pushing request(GET/POST) parameters to elasticsearch servers. this makes the payload huge. Look forward to the response. Re… --- ## [Syslogs, Beat, Redundancy and Architecture](https://discuss.elastic.co/t/syslogs-beat-redundancy-and-architecture/52928)
**Author:** [@jasonh](https://discuss.elastic.co/u/jasonh)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 11:58pm UTC](https://discuss.elastic.co/t/syslogs-beat-redundancy-and-architecture/52928 "2016-06-15T23:58:28Z")
Hello Group I'm setting up an ELK which will take a feed of syslogs from a variety of devices including Cisco's Linux Server Syslogs, App files and Windows server logs and files. I want to make it as redundant as possibl… --- ## [Large log entries getting truncated](https://discuss.elastic.co/t/large-log-entries-getting-truncated/34874)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 8\ **Last updated:** [June 15, 2016, 5:30pm UTC](https://discuss.elastic.co/t/large-log-entries-getting-truncated/34874 "2016-06-15T17:30:10Z")
Using filebeat v1.0.0~rc2 on Ubuntu 12.04.3 LTS, our large php-error log entries are getting truncated. The log entries are typically between 3k and 8k, common ones are around 4k. The first 1024 bytes is what seems to be… --- ## [Capture environment variable](https://discuss.elastic.co/t/capture-environment-variable/33635)
**Author:** [@sijis](https://discuss.elastic.co/u/sijis)\ **Replies:** 6\ **Last updated:** [June 15, 2016, 1:51pm UTC](https://discuss.elastic.co/t/capture-environment-variable/33635 "2016-06-15T13:51:34Z")
Is it possible (or in the plans) to dynamically capture environment variable within a prospects entry or in tags on input section? Is there another way to do this instead? We have a lot of instances and its not feasibl… --- ## [Filebeat showing logs older than 24 hrs](https://discuss.elastic.co/t/filebeat-showing-logs-older-than-24-hrs/52668)
**Author:** [@filebeat\_win](https://discuss.elastic.co/u/filebeat_win)\ **Replies:** 5\ **Last updated:** [June 15, 2016, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-showing-logs-older-than-24-hrs/52668 "2016-06-15T13:24:22Z")
Hi All, On Windows, my filebeat.yml is set to ignore older than 24h, yet when I am running filebeat today, it is actually showing IIS logs from back in May. The IIS logs are configured to rollover each day, so I'm not… --- ## [A beat for RRD files? (or How to start a beat, by a go-newbie?)](https://discuss.elastic.co/t/a-beat-for-rrd-files-or-how-to-start-a-beat-by-a-go-newbie/51787)
**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\ **Replies:** 9\ **Last updated:** [June 15, 2016, 1:01pm UTC](https://discuss.elastic.co/t/a-beat-for-rrd-files-or-how-to-start-a-beat-by-a-go-newbie/51787 "2016-06-15T13:01:56Z")
Hi there, I've been setting up an ELK stack to collect various metrics. Most of them will come from hosts where I can't afford installing Logstash, so I plan to use Beats. For logs, it's quite trivial, thanks to Fil… --- ## [Meaning of topbeat fields](https://discuss.elastic.co/t/meaning-of-topbeat-fields/52844)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 2\ **Last updated:** [June 15, 2016, 10:15am UTC](https://discuss.elastic.co/t/meaning-of-topbeat-fields/52844 "2016-06-15T10:15:32Z")
I am using topbeat to feed metrics to the server, however, I do not quite understand the meaning of those fields after reading the documentation. For load.load1, it states that it is the number of jobs in run queue pe… --- ## [Is it possible to run custom shell script using Topbeat?](https://discuss.elastic.co/t/is-it-possible-to-run-custom-shell-script-using-topbeat/52613)
**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\ **Replies:** 8\ **Last updated:** [June 15, 2016, 10:44am UTC](https://discuss.elastic.co/t/is-it-possible-to-run-custom-shell-script-using-topbeat/52613 "2016-06-15T10:44:17Z")
Hi guys, I am using topbeat to monitor server resource utilization, now i want to attach some custom shell script in topbeat to collect addition resource utilization data of servers. The custom script output should b… --- ## [Can we get network metrics of kafka through packetbeat?](https://discuss.elastic.co/t/can-we-get-network-metrics-of-kafka-through-packetbeat/51214)
**Author:** [@natarajan\_k](https://discuss.elastic.co/u/natarajan_k)\ **Replies:** 3\ **Last updated:** [June 15, 2016, 8:30am UTC](https://discuss.elastic.co/t/can-we-get-network-metrics-of-kafka-through-packetbeat/51214 "2016-06-15T08:30:11Z")
i have kafka and packetbeat in same machine of ubuntu distribution. i can get the network statistics of 80 and 53 port from packetbeat but i would like to know is there any way we can get the kafka traffic. i have seen … --- ## [Filebeat is losing events due to file rotate](https://discuss.elastic.co/t/filebeat-is-losing-events-due-to-file-rotate/52436)
**Author:** [@mostolog](https://discuss.elastic.co/u/mostolog)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 7:54am UTC](https://discuss.elastic.co/t/filebeat-is-losing-events-due-to-file-rotate/52436 "2016-06-15T07:54:50Z")
Hi! I'm opening this topic before opening an issue on github. I hope not made any mistakes, cause it took me quite a long to test it and to report it in here. Thanks in advance for your kind help. Regards Scenario … --- ## [JSON logs --\> fail to ship the last line of the file](https://discuss.elastic.co/t/json-logs-fail-to-ship-the-last-line-of-the-file/52542)
**Author:** [@sahas](https://discuss.elastic.co/u/sahas)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 6:13am UTC](https://discuss.elastic.co/t/json-logs-fail-to-ship-the-last-line-of-the-file/52542 "2016-06-15T06:13:23Z")
Pulled down the latest alpha (filebeat-5.0.0-alpha3-darwin-x64). Below is the config to ship .json logs - input\_type: log # Paths that should be crawled and fetched. Glob based paths. paths: - ./test/t… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=574) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=576)